# Flog Txt Version 1 # Analyzer Version: 4.2.2 # Analyzer Build Date: Jun 7 2021 05:43:29 # Log Creation Date: 02.07.2021 19:12:40.899 Process: id = "1" image_name = "urnxby.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\urnxby.exe" page_root = "0xcf75000" os_pid = "0xf14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x674" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f741" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 119 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 120 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 121 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 122 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 123 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 124 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 125 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 126 start_va = 0x1c0000 end_va = 0x2a0fff monitored = 1 entry_point = 0x1c13ef region_type = mapped_file name = "urnxby.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\urnxby.exe") Region: id = 127 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 128 start_va = 0x77150000 end_va = 0x772cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 129 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 130 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 131 start_va = 0x7fff0000 end_va = 0x7ffc2f67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 132 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 133 start_va = 0x7ffc2f841000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc2f841000" filename = "" Region: id = 274 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 275 start_va = 0x50860000 end_va = 0x508d9fff monitored = 0 entry_point = 0x50873290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 276 start_va = 0x508e0000 end_va = 0x5092ffff monitored = 0 entry_point = 0x508f8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 277 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 278 start_va = 0x50930000 end_va = 0x50937fff monitored = 0 entry_point = 0x509317c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 279 start_va = 0x600000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 280 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 281 start_va = 0x74830000 end_va = 0x749adfff monitored = 0 entry_point = 0x748e1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 282 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 283 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 284 start_va = 0x2e0000 end_va = 0x39dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 285 start_va = 0x73dd0000 end_va = 0x73e61fff monitored = 0 entry_point = 0x73e10380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 286 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 287 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 288 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 289 start_va = 0x2b0000 end_va = 0x2b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 290 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 307 start_va = 0x73fb0000 end_va = 0x73fbbfff monitored = 0 entry_point = 0x73fb3930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 319 start_va = 0x73fc0000 end_va = 0x7407dfff monitored = 0 entry_point = 0x73ff5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 323 start_va = 0x3a0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 324 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 325 start_va = 0x7c0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 326 start_va = 0x73f00000 end_va = 0x73facfff monitored = 0 entry_point = 0x73f14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 331 start_va = 0x73e80000 end_va = 0x73e9dfff monitored = 0 entry_point = 0x73e8b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 333 start_va = 0x73e70000 end_va = 0x73e79fff monitored = 0 entry_point = 0x73e72a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 335 start_va = 0x747d0000 end_va = 0x74827fff monitored = 0 entry_point = 0x748125c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 338 start_va = 0x751f0000 end_va = 0x75233fff monitored = 0 entry_point = 0x75209d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 339 start_va = 0x8c0000 end_va = 0x9effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Thread: id = 1 os_tid = 0x13f8 [0062.822] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0062.823] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74830000 [0062.823] GetProcAddress (hModule=0x74830000, lpProcName="InitializeCriticalSectionEx") returned 0x748ed740 [0062.823] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74830000 [0062.823] GetProcAddress (hModule=0x74830000, lpProcName="FlsAlloc") returned 0x748f4490 [0062.823] GetProcAddress (hModule=0x74830000, lpProcName="FlsSetValue") returned 0x748ed7a0 [0062.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x74830000 [0062.825] GetProcAddress (hModule=0x74830000, lpProcName="InitializeCriticalSectionEx") returned 0x748ed740 [0062.825] GetProcessHeap () returned 0x7c0000 [0062.825] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x74830000 [0062.825] GetProcAddress (hModule=0x74830000, lpProcName="FlsAlloc") returned 0x748f4490 [0062.825] GetLastError () returned 0x0 [0062.825] GetProcAddress (hModule=0x74830000, lpProcName="FlsGetValue") returned 0x748df350 [0062.825] GetProcAddress (hModule=0x74830000, lpProcName="FlsSetValue") returned 0x748ed7a0 [0062.825] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x364) returned 0x7cf168 [0062.825] SetLastError (dwErrCode=0x0) [0062.826] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0xe00) returned 0x7d1e38 [0062.951] GetStartupInfoW (in: lpStartupInfo=0x19fe9c | out: lpStartupInfo=0x19fe9c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0062.951] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0062.951] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0062.951] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0062.951] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe\" " [0062.951] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe\" " [0062.951] GetACP () returned 0x4e4 [0062.951] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x0, Size=0x220) returned 0x7d2c40 [0062.951] IsValidCodePage (CodePage=0x4e4) returned 1 [0062.951] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19febc | out: lpCPInfo=0x19febc) returned 1 [0062.951] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f784 | out: lpCPInfo=0x19f784) returned 1 [0062.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0062.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f528, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ桂\x1cĀ") returned 256 [0062.951] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ桂\x1cĀ", cchSrc=256, lpCharType=0x19f798 | out: lpCharType=0x19f798) returned 1 [0062.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0062.951] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0062.951] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x74830000 [0062.951] GetProcAddress (hModule=0x74830000, lpProcName="LCMapStringEx") returned 0x748d95f0 [0062.952] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0062.952] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x19f2c8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0062.952] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x19fc98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ×µ{îÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0062.952] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0062.952] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fd98, cbMultiByte=256, lpWideCharStr=0x19f4f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蒙\x1cĀ") returned 256 [0062.952] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蒙\x1cĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0062.952] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ蒙\x1cĀ", cchSrc=256, lpDestStr=0x19f2e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0062.952] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x19fb98, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ×µ{îÔþ\x19", lpUsedDefaultChar=0x0) returned 256 [0062.952] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x0, Size=0x80) returned 0x7ce258 [0062.952] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1d3ca0, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\urnxby.exe")) returned 0x28 [0062.952] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x5a) returned 0x7ce2e0 [0062.952] RtlInitializeSListHead (in: ListHead=0x1d38a8 | out: ListHead=0x1d38a8) [0062.952] GetLastError () returned 0x0 [0062.952] SetLastError (dwErrCode=0x0) [0062.952] GetEnvironmentStringsW () returned 0x7cfed8* [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x0, Size=0xa1a) returned 0x7d2e68 [0062.953] FreeEnvironmentStringsW (penv=0x7cfed8) returned 1 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x90) returned 0x7cebc0 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x3e) returned 0x7ce348 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x5c) returned 0x7cec58 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x6e) returned 0x7cecc0 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x78) returned 0x7d3a38 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x62) returned 0x7c6970 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x28) returned 0x7c6878 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x48) returned 0x7c69e0 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x1a) returned 0x7caa60 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x3a) returned 0x7c6a30 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x62) returned 0x7c6a78 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x2a) returned 0x7c6ae8 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x2e) returned 0x7c6b20 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x1c) returned 0x7ca8a8 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0xd2) returned 0x7cf4d8 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x7c) returned 0x7cf5b8 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x36) returned 0x7cf640 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x3a) returned 0x7cf680 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x90) returned 0x7cf6c8 [0062.953] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x24) returned 0x7cf760 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x30) returned 0x7cf790 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x36) returned 0x7cf7c8 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x48) returned 0x7cf808 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x52) returned 0x7cf858 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x3c) returned 0x7cf8b8 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0xd6) returned 0x7cf900 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x2e) returned 0x7cf9e0 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x1e) returned 0x7caab0 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x2c) returned 0x7cfa18 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x54) returned 0x7cfa50 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x52) returned 0x7cfed8 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x24) returned 0x7cff38 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x42) returned 0x7cff68 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x2c) returned 0x7cffb8 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x44) returned 0x7cfff0 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x24) returned 0x7d0040 [0062.954] HeapFree (in: hHeap=0x7c0000, dwFlags=0x0, lpMem=0x7d2e68 | out: hHeap=0x7c0000) returned 1 [0062.954] RtlAllocateHeap (HeapHandle=0x7c0000, Flags=0x8, Size=0x800) returned 0x7d0070 [0062.954] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0062.954] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1c1900) returned 0x0 [0062.954] GetStartupInfoW (in: lpStartupInfo=0x19ff00 | out: lpStartupInfo=0x19ff00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\urnxby.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0062.955] FindResourceW (hModule=0x0, lpName=0x65, lpType="SOFTIS") returned 0x1d5090 [0062.955] LoadResource (hModule=0x0, hResInfo=0x1d5090) returned 0x1d50c0 [0062.955] LockResource (hResData=0x1d50c0) returned 0x1d50c0 [0062.955] FindResourceW (hModule=0x0, lpName=0x66, lpType="MODLIS") returned 0x1d5080 [0062.955] LoadResource (hModule=0x0, hResInfo=0x1d5080) returned 0x1da790 [0062.955] LockResource (hResData=0x1da790) returned 0x1da790 [0062.955] VirtualAlloc (lpAddress=0x0, dwSize=0x208, flAllocationType=0x3000, flProtect=0x4) returned 0x30000 [0062.955] lstrcatW (in: lpString1="", lpString2="C:\\Windows\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0062.955] lstrcatW (in: lpString1="C:\\Windows\\", lpString2="mpsvc.dll" | out: lpString1="C:\\Windows\\mpsvc.dll") returned="C:\\Windows\\mpsvc.dll" [0062.955] CreateFileW (lpFileName="C:\\Windows\\mpsvc.dll" (normalized: "c:\\windows\\mpsvc.dll"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94 [0062.964] WriteFile (in: hFile=0x94, lpBuffer=0x1da790*, nNumberOfBytesToWrite=0xc5588, lpNumberOfBytesWritten=0x19ff20, lpOverlapped=0x0 | out: lpBuffer=0x1da790*, lpNumberOfBytesWritten=0x19ff20*=0xc5588, lpOverlapped=0x0) returned 1 [0062.981] CloseHandle (hObject=0x94) returned 1 [0063.012] VirtualAlloc (lpAddress=0x0, dwSize=0x208, flAllocationType=0x3000, flProtect=0x4) returned 0x2b0000 [0063.012] lstrcatW (in: lpString1="", lpString2="C:\\Windows\\" | out: lpString1="C:\\Windows\\") returned="C:\\Windows\\" [0063.012] lstrcatW (in: lpString1="C:\\Windows\\", lpString2="MsMpEng.exe" | out: lpString1="C:\\Windows\\MsMpEng.exe") returned="C:\\Windows\\MsMpEng.exe" [0063.012] CreateFileW (lpFileName="C:\\Windows\\MsMpEng.exe" (normalized: "c:\\windows\\msmpeng.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x94 [0063.013] WriteFile (in: hFile=0x94, lpBuffer=0x1d50c0*, nNumberOfBytesToWrite=0x56d0, lpNumberOfBytesWritten=0x19ff20, lpOverlapped=0x0 | out: lpBuffer=0x1d50c0*, lpNumberOfBytesWritten=0x19ff20*=0x56d0, lpOverlapped=0x0) returned 1 [0063.015] CloseHandle (hObject=0x94) returned 1 [0063.021] CreateProcessW (in: lpApplicationName="C:\\Windows\\MsMpEng.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x230, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x1d43a8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1d43ec | out: lpCommandLine="", lpProcessInformation=0x1d43ec*(hProcess=0x98, hThread=0x94, dwProcessId=0xed4, dwThreadId=0xee0)) returned 1 [0063.066] GetModuleHandleW (lpModuleName=0x0) returned 0x1c0000 [0063.066] GetModuleHandleW (lpModuleName=0x0) returned 0x1c0000 [0063.066] HeapFree (in: hHeap=0x7c0000, dwFlags=0x0, lpMem=0x7ce258 | out: hHeap=0x7c0000) returned 1 [0063.066] HeapFree (in: hHeap=0x7c0000, dwFlags=0x0, lpMem=0x7d0070 | out: hHeap=0x7c0000) returned 1 [0063.066] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x73fb0000 [0067.531] GetProcAddress (hModule=0x73fb0000, lpProcName="AppPolicyGetProcessTerminationMethod") returned 0x0 [0067.531] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x19fef8 | out: phModule=0x19fef8) returned 0 [0067.531] ExitProcess (uExitCode=0x0) [0067.532] HeapFree (in: hHeap=0x7c0000, dwFlags=0x0, lpMem=0x7cf168 | out: hHeap=0x7c0000) returned 1 Thread: id = 4 os_tid = 0x318 Process: id = "2" image_name = "msmpeng.exe" filename = "c:\\windows\\msmpeng.exe" page_root = "0x37502000" os_pid = "0xed4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf14" cmd_line = "\"C:\\Windows\\MsMpEng.exe\"" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f741" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 291 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 292 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 293 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 294 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 295 start_va = 0xa0000 end_va = 0xdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 296 start_va = 0xe0000 end_va = 0xe3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 297 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 298 start_va = 0x100000 end_va = 0x101fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 299 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 300 start_va = 0x1280000 end_va = 0x1285fff monitored = 1 entry_point = 0x12810e1 region_type = mapped_file name = "msmpeng.exe" filename = "\\Windows\\MsMpEng.exe" (normalized: "c:\\windows\\msmpeng.exe") Region: id = 301 start_va = 0x77150000 end_va = 0x772cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 302 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 303 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 304 start_va = 0x7fff0000 end_va = 0x7ffc2f67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 305 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 306 start_va = 0x7ffc2f841000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc2f841000" filename = "" Region: id = 308 start_va = 0x160000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 309 start_va = 0x50860000 end_va = 0x508d9fff monitored = 0 entry_point = 0x50873290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 310 start_va = 0x508e0000 end_va = 0x5092ffff monitored = 0 entry_point = 0x508f8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 311 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 312 start_va = 0x50930000 end_va = 0x50937fff monitored = 0 entry_point = 0x509317c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 313 start_va = 0x400000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 314 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 315 start_va = 0x74830000 end_va = 0x749adfff monitored = 0 entry_point = 0x748e1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 316 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 317 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 318 start_va = 0x580000 end_va = 0x63dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 320 start_va = 0x73dd0000 end_va = 0x73e61fff monitored = 0 entry_point = 0x73e10380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 321 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 322 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 327 start_va = 0x110000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 328 start_va = 0x170000 end_va = 0x1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 329 start_va = 0x6e310000 end_va = 0x6e3d9fff monitored = 1 entry_point = 0x6e36fce6 region_type = mapped_file name = "mpsvc.dll" filename = "\\Windows\\mpsvc.dll" (normalized: "c:\\windows\\mpsvc.dll") Region: id = 330 start_va = 0x742b0000 end_va = 0x743f6fff monitored = 0 entry_point = 0x742c1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 332 start_va = 0x752d0000 end_va = 0x7541efff monitored = 0 entry_point = 0x75386820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 334 start_va = 0x74ed0000 end_va = 0x74f4afff monitored = 0 entry_point = 0x74eee970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 336 start_va = 0x73fc0000 end_va = 0x7407dfff monitored = 0 entry_point = 0x73ff5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 337 start_va = 0x751f0000 end_va = 0x75233fff monitored = 0 entry_point = 0x75209d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 340 start_va = 0x73f00000 end_va = 0x73facfff monitored = 0 entry_point = 0x73f14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 341 start_va = 0x73e80000 end_va = 0x73e9dfff monitored = 0 entry_point = 0x73e8b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 342 start_va = 0x73e70000 end_va = 0x73e79fff monitored = 0 entry_point = 0x73e72a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 343 start_va = 0x747d0000 end_va = 0x74827fff monitored = 0 entry_point = 0x748125c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 344 start_va = 0x1b0000 end_va = 0x1d9fff monitored = 0 entry_point = 0x1b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 345 start_va = 0x640000 end_va = 0x7c7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 346 start_va = 0x770c0000 end_va = 0x770eafff monitored = 0 entry_point = 0x770c5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 347 start_va = 0x7d0000 end_va = 0x950fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 348 start_va = 0x1290000 end_va = 0x268ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001290000" filename = "" Region: id = 349 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 350 start_va = 0x150000 end_va = 0x150fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 351 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 352 start_va = 0x480000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 353 start_va = 0x1b0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 354 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 355 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 356 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 357 start_va = 0x960000 end_va = 0x981fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 358 start_va = 0x74130000 end_va = 0x741c1fff monitored = 0 entry_point = 0x74168cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 359 start_va = 0x76a00000 end_va = 0x76bbcfff monitored = 0 entry_point = 0x76ae2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 360 start_va = 0x990000 end_va = 0xa79fff monitored = 0 entry_point = 0x9cd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 361 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 362 start_va = 0x990000 end_va = 0xcc6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 363 start_va = 0x713f0000 end_va = 0x7148afff monitored = 0 entry_point = 0x7142f7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 364 start_va = 0x75070000 end_va = 0x751e7fff monitored = 0 entry_point = 0x750c8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 365 start_va = 0x74eb0000 end_va = 0x74ebdfff monitored = 0 entry_point = 0x74eb5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 366 start_va = 0x744c0000 end_va = 0x74504fff monitored = 0 entry_point = 0x744dde90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 367 start_va = 0x6f020000 end_va = 0x6f043fff monitored = 0 entry_point = 0x6f024820 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 368 start_va = 0x6eff0000 end_va = 0x6f012fff monitored = 0 entry_point = 0x6eff8940 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 369 start_va = 0x73ec0000 end_va = 0x73ef6fff monitored = 0 entry_point = 0x73ec3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 370 start_va = 0x6efc0000 end_va = 0x6efeafff monitored = 0 entry_point = 0x6efc51b0 region_type = mapped_file name = "rstrtmgr.dll" filename = "\\Windows\\SysWOW64\\RstrtMgr.dll" (normalized: "c:\\windows\\syswow64\\rstrtmgr.dll") Region: id = 371 start_va = 0x6f440000 end_va = 0x6f45ffff monitored = 0 entry_point = 0x6f44d120 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\SysWOW64\\ncrypt.dll" (normalized: "c:\\windows\\syswow64\\ncrypt.dll") Region: id = 372 start_va = 0x714e0000 end_va = 0x714fafff monitored = 0 entry_point = 0x714e9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 373 start_va = 0x6f410000 end_va = 0x6f43bfff monitored = 0 entry_point = 0x6f42bb10 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\SysWOW64\\ntasn1.dll" (normalized: "c:\\windows\\syswow64\\ntasn1.dll") Region: id = 374 start_va = 0x75600000 end_va = 0x769fefff monitored = 0 entry_point = 0x757bb990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 375 start_va = 0xcd0000 end_va = 0xd0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 376 start_va = 0xd10000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 377 start_va = 0x76bc0000 end_va = 0x770b8fff monitored = 0 entry_point = 0x76dc7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 378 start_va = 0x73fb0000 end_va = 0x73fbbfff monitored = 0 entry_point = 0x73fb3930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 379 start_va = 0x740a0000 end_va = 0x7412cfff monitored = 0 entry_point = 0x740e9b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 380 start_va = 0x74610000 end_va = 0x74653fff monitored = 0 entry_point = 0x74617410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 381 start_va = 0x74290000 end_va = 0x7429efff monitored = 0 entry_point = 0x74292e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 382 start_va = 0x6f350000 end_va = 0x6f365fff monitored = 0 entry_point = 0x6f3521d0 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 383 start_va = 0x74080000 end_va = 0x74092fff monitored = 0 entry_point = 0x74081d20 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\SysWOW64\\netapi32.dll" (normalized: "c:\\windows\\syswow64\\netapi32.dll") Region: id = 384 start_va = 0x6f330000 end_va = 0x6f344fff monitored = 0 entry_point = 0x6f335210 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\SysWOW64\\samcli.dll" (normalized: "c:\\windows\\syswow64\\samcli.dll") Region: id = 385 start_va = 0x6f310000 end_va = 0x6f32bfff monitored = 0 entry_point = 0x6f314720 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 386 start_va = 0x6efb0000 end_va = 0x6efb9fff monitored = 0 entry_point = 0x6efb28d0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 387 start_va = 0xd50000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 388 start_va = 0x1f0000 end_va = 0x1f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 389 start_va = 0x2690000 end_va = 0x2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 390 start_va = 0x460000 end_va = 0x463fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 391 start_va = 0x2c20000 end_va = 0x30bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c20000" filename = "" Region: id = 392 start_va = 0x30c0000 end_va = 0x34dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000030c0000" filename = "" Region: id = 393 start_va = 0xd50000 end_va = 0xd53fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 394 start_va = 0xe00000 end_va = 0x120ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 395 start_va = 0x72c30000 end_va = 0x72ca4fff monitored = 0 entry_point = 0x72c69a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 396 start_va = 0x2690000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 397 start_va = 0x2810000 end_va = 0x2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002810000" filename = "" Region: id = 398 start_va = 0xd60000 end_va = 0xd60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d60000" filename = "" Region: id = 399 start_va = 0x75240000 end_va = 0x752c3fff monitored = 0 entry_point = 0x75266220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 400 start_va = 0xd70000 end_va = 0xd73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 401 start_va = 0xd80000 end_va = 0xd80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d80000" filename = "" Region: id = 402 start_va = 0xd90000 end_va = 0xd90fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d90000" filename = "" Region: id = 403 start_va = 0xda0000 end_va = 0xddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 404 start_va = 0x1210000 end_va = 0x124ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001210000" filename = "" Region: id = 405 start_va = 0x2690000 end_va = 0x26cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 406 start_va = 0x26d0000 end_va = 0x270ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 407 start_va = 0x27f0000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 408 start_va = 0x6ef80000 end_va = 0x6efa7fff monitored = 0 entry_point = 0x6ef87820 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 409 start_va = 0x6fba0000 end_va = 0x6fceafff monitored = 0 entry_point = 0x6fc01660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 410 start_va = 0xde0000 end_va = 0xde3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 411 start_va = 0x1250000 end_va = 0x1262fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000006.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000006.db") Region: id = 412 start_va = 0xdf0000 end_va = 0xdf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000df0000" filename = "" Region: id = 431 start_va = 0x2710000 end_va = 0x274ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 432 start_va = 0x2750000 end_va = 0x278ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 470 start_va = 0xd60000 end_va = 0xd60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d60000" filename = "" Region: id = 471 start_va = 0x6ef70000 end_va = 0x6ef7cfff monitored = 0 entry_point = 0x6ef73520 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemprox.dll") Region: id = 472 start_va = 0x741d0000 end_va = 0x7422efff monitored = 0 entry_point = 0x741d4af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 473 start_va = 0x6ef00000 end_va = 0x6ef66fff monitored = 0 entry_point = 0x6ef1b610 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\SysWOW64\\wbemcomn.dll" (normalized: "c:\\windows\\syswow64\\wbemcomn.dll") Region: id = 1045 start_va = 0x2790000 end_va = 0x27cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002790000" filename = "" Region: id = 1046 start_va = 0x2c20000 end_va = 0x2c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c20000" filename = "" Region: id = 1047 start_va = 0x2cb0000 end_va = 0x30bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cb0000" filename = "" Region: id = 1059 start_va = 0x6eee0000 end_va = 0x6eef0fff monitored = 0 entry_point = 0x6eee8fa0 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\SysWOW64\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\syswow64\\wbem\\wbemsvc.dll") Region: id = 1062 start_va = 0x6ee20000 end_va = 0x6eedefff monitored = 0 entry_point = 0x6ee51e80 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\SysWOW64\\wbem\\fastprox.dll" (normalized: "c:\\windows\\syswow64\\wbem\\fastprox.dll") Region: id = 1234 start_va = 0x6ea70000 end_va = 0x6ea7afff monitored = 0 entry_point = 0x6ea71ed0 region_type = mapped_file name = "dsparse.dll" filename = "\\Windows\\SysWOW64\\dsparse.dll" (normalized: "c:\\windows\\syswow64\\dsparse.dll") Region: id = 1327 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 1328 start_va = 0x34e0000 end_va = 0x35dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034e0000" filename = "" Region: id = 1329 start_va = 0x27d0000 end_va = 0x27effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1330 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1331 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1332 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1333 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1334 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1335 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1336 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1337 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1338 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1339 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1340 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1341 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1342 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1343 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1344 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1345 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1346 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1347 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1348 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1349 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1350 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1351 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1352 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1353 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1354 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1355 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1356 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1357 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1358 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1359 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1360 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1361 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1362 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1363 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1364 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1365 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1366 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1367 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1368 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1369 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1370 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1371 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1372 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1373 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1374 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1375 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1376 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1377 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1378 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1379 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1380 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1381 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1382 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1383 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1384 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1385 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1386 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1387 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1388 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1389 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1390 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1391 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1392 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1393 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1394 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1395 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1396 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1397 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1398 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1399 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1400 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1401 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1402 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1403 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1404 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1405 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1406 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1407 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1408 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1409 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1410 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1411 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1412 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1413 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1414 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1415 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1416 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1417 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1418 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1419 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1420 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1421 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1422 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1423 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1424 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1425 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1426 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1427 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1428 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1429 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1430 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1431 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1432 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1433 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1434 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1435 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1436 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1437 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1438 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1439 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1440 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1441 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1442 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1443 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1444 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1445 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1446 start_va = 0x2c60000 end_va = 0x2c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 1447 start_va = 0x35e0000 end_va = 0x361ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035e0000" filename = "" Region: id = 1448 start_va = 0x3620000 end_va = 0x3bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003620000" filename = "" Region: id = 1449 start_va = 0x3620000 end_va = 0x365ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003620000" filename = "" Region: id = 1450 start_va = 0x3660000 end_va = 0x369ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003660000" filename = "" Region: id = 1451 start_va = 0x36a0000 end_va = 0x36dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036a0000" filename = "" Region: id = 1452 start_va = 0x36e0000 end_va = 0x371ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036e0000" filename = "" Region: id = 1453 start_va = 0x37d0000 end_va = 0x3bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000037d0000" filename = "" Region: id = 1454 start_va = 0x3720000 end_va = 0x375ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003720000" filename = "" Region: id = 1455 start_va = 0x3760000 end_va = 0x379ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003760000" filename = "" Region: id = 1456 start_va = 0x3be0000 end_va = 0x3c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003be0000" filename = "" Region: id = 1457 start_va = 0x3c20000 end_va = 0x3c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c20000" filename = "" Region: id = 1458 start_va = 0x3c60000 end_va = 0x3c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c60000" filename = "" Region: id = 1459 start_va = 0x3ca0000 end_va = 0x3cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ca0000" filename = "" Region: id = 1460 start_va = 0x3ce0000 end_va = 0x3d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ce0000" filename = "" Region: id = 1461 start_va = 0x3d20000 end_va = 0x3d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d20000" filename = "" Region: id = 1462 start_va = 0x3d60000 end_va = 0x3d9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d60000" filename = "" Region: id = 1463 start_va = 0x3da0000 end_va = 0x3ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003da0000" filename = "" Region: id = 1467 start_va = 0x3de0000 end_va = 0x3e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003de0000" filename = "" Region: id = 1468 start_va = 0x3e20000 end_va = 0x3e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e20000" filename = "" Region: id = 1517 start_va = 0x3e60000 end_va = 0x3f6efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 1518 start_va = 0x3f70000 end_va = 0x4075fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f70000" filename = "" Region: id = 1519 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 1520 start_va = 0x27d0000 end_va = 0x27effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1521 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1522 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1523 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1524 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1525 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1526 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1527 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1528 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1529 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1530 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1531 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1532 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1533 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1534 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1535 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1536 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1537 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1538 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1539 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1540 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1541 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1542 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1543 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1544 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1545 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1546 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1547 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 1548 start_va = 0x27d0000 end_va = 0x27effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1549 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1550 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1551 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1552 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1553 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1554 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1555 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1556 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1557 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1558 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1559 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1560 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1561 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1562 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1563 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1564 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1565 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1566 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1567 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1568 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1569 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1570 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1571 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1572 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1573 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1574 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1575 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1576 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1577 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1578 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1579 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1580 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1581 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1582 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1583 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1584 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1585 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1586 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1587 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1588 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1589 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1590 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1591 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1592 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1593 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1594 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1595 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1596 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1597 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1598 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1599 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1600 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1601 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1602 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1603 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1604 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1605 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1606 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1607 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1608 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1609 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1610 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1611 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1612 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1613 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1614 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1615 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1616 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1617 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1618 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1619 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1620 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1621 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1622 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1623 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1624 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1625 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1626 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1627 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1628 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1629 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1630 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1631 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1632 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1633 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1634 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1635 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1636 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1637 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1638 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1639 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1640 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1641 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1642 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1643 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1644 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1645 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1646 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1647 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1648 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1649 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1650 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1651 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1652 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1653 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1654 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1655 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1656 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1657 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1658 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1659 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1660 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1661 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1662 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1663 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1664 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1665 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1666 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1667 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1668 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1669 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1670 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1671 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1672 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1673 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1674 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1675 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1676 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1677 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1678 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1679 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1680 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1681 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1682 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1683 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1684 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1685 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1686 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1687 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1688 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1689 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1690 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1691 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1692 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1693 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1694 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1695 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1696 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1697 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1698 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1699 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1700 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1701 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1702 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1703 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1704 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1705 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1706 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1707 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1708 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1709 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1710 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1711 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1712 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1713 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1714 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1715 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1716 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1717 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1718 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1719 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1720 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1721 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1722 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1723 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1724 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1725 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1726 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1727 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1728 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1729 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1730 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1731 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1732 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1733 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1734 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1735 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1736 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1737 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1738 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1739 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1740 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1741 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1742 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1743 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1744 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1745 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1746 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1747 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1748 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1749 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1750 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1751 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1752 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1753 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1754 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1755 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1756 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1757 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1758 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1759 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1760 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1761 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1762 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1763 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1764 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1765 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1766 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1767 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1768 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1769 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1770 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1771 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1772 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1773 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1774 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1775 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1776 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1777 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1778 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1779 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1780 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1781 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1782 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1783 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1784 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1785 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1786 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1787 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1788 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1789 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1790 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1791 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1792 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1793 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1794 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1795 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1796 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1797 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1798 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1799 start_va = 0xde0000 end_va = 0xde5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1800 start_va = 0xde0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 1801 start_va = 0x27d0000 end_va = 0x27effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027d0000" filename = "" Region: id = 1802 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1803 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1804 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1805 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1806 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1807 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1808 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1809 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1810 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1811 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1812 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1813 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1814 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1815 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1816 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1817 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1818 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1819 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1820 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1821 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1822 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1823 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1824 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1825 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1826 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1827 start_va = 0xde0000 end_va = 0xdeefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000de0000" filename = "" Region: id = 1828 start_va = 0xde0000 end_va = 0xde0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mpr.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\mpr.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mpr.dll.mui") Region: id = 1829 start_va = 0x6e4b0000 end_va = 0x6e4b8fff monitored = 0 entry_point = 0x6e4b1db0 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll") Region: id = 1830 start_va = 0x6e460000 end_va = 0x6e4a3fff monitored = 0 entry_point = 0x6e47aaf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 1831 start_va = 0x6e440000 end_va = 0x6e451fff monitored = 0 entry_point = 0x6e443d40 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll") Region: id = 1833 start_va = 0x6e2f0000 end_va = 0x6e309fff monitored = 0 entry_point = 0x6e2f3270 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll") Region: id = 1834 start_va = 0x72ce0000 end_va = 0x72ceafff monitored = 0 entry_point = 0x72ce1d20 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll") Region: id = 1835 start_va = 0x6e3e0000 end_va = 0x6e3effff monitored = 0 entry_point = 0x6e3e34d0 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 1841 start_va = 0x6e280000 end_va = 0x6e28efff monitored = 0 entry_point = 0x6e283f00 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 1845 start_va = 0x6e1a0000 end_va = 0x6e1aefff monitored = 0 entry_point = 0x6e1a20e0 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\SysWOW64\\browcli.dll" (normalized: "c:\\windows\\syswow64\\browcli.dll") Region: id = 2006 start_va = 0x3e60000 end_va = 0x3f3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 2065 start_va = 0x1270000 end_va = 0x1272fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001270000" filename = "" Region: id = 2169 start_va = 0x3f40000 end_va = 0x3f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f40000" filename = "" Region: id = 2170 start_va = 0x3f80000 end_va = 0x3fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 2171 start_va = 0x110000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2172 start_va = 0x110000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2173 start_va = 0x130000 end_va = 0x135fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2174 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2175 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2176 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2177 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2178 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2179 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2180 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2181 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2182 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2183 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2184 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2185 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2186 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2187 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2188 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2189 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2190 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2191 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2192 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2193 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2194 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2195 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2196 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2197 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2198 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2199 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2200 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2201 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2202 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2203 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2204 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2205 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2206 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2207 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2208 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2209 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2210 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2211 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2212 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2213 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2214 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2215 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2216 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2217 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2218 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2219 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2220 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2221 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2222 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2223 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2224 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2225 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2226 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2227 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2228 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2229 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2230 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2231 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2232 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2233 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2234 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2235 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2236 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2237 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2238 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2239 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2240 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2241 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2242 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2243 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2244 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2245 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2246 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2247 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2248 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2249 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2250 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2251 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2252 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2253 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2254 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2255 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2256 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2257 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2258 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2259 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2260 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2261 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2262 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2263 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2264 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2265 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2266 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2267 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2268 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2269 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2270 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2271 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2272 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2273 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2274 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2275 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2276 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2277 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2278 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2279 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2280 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2281 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2282 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2283 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2284 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2285 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2286 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2287 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2288 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2289 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2290 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2291 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2292 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2293 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2294 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2295 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2296 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2297 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2298 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2299 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2300 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2301 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2302 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2303 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2304 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2305 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2306 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2307 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2308 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2309 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2310 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2311 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2312 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2313 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2314 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2315 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2316 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2317 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2318 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2319 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2320 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2321 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2322 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2323 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2324 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2325 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2326 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2327 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2328 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2329 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2330 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2331 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2332 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2333 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2334 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2335 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2336 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2337 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2338 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2339 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2340 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2341 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2342 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2343 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2344 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2345 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2346 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2347 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2348 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2349 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2350 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2351 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2352 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2353 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2354 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2355 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2356 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2357 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2358 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2359 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2360 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2361 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2362 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2363 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2364 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2365 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2366 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2367 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2368 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2369 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2370 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2371 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2372 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2373 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2374 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2375 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2376 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2377 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2378 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2379 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2380 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2381 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2382 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2383 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2384 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2385 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2386 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2387 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2388 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2389 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2390 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2391 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2392 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2393 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2394 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2395 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2396 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2397 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2398 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2399 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2400 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2401 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2402 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2403 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2404 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2405 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2406 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2407 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2408 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2409 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2410 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2411 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2412 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2413 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2414 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2415 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2416 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2417 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2418 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2419 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2420 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2421 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2422 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2423 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2447 start_va = 0x3fc0000 end_va = 0x4ffffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 2448 start_va = 0x35e0000 end_va = 0x3ad1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000035e0000" filename = "" Region: id = 2449 start_va = 0x5000000 end_va = 0x54f7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 2453 start_va = 0x110000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Thread: id = 2 os_tid = 0xee0 [0067.870] GetProcessHeap () returned 0x480000 [0067.871] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75520000 [0067.871] GetProcAddress (hModule=0x75520000, lpProcName="FlsAlloc") returned 0x7553a980 [0067.871] GetProcAddress (hModule=0x75520000, lpProcName="FlsFree") returned 0x75544ff0 [0067.871] GetProcAddress (hModule=0x75520000, lpProcName="FlsGetValue") returned 0x75537570 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="FlsSetValue") returned 0x75539e30 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="InitializeCriticalSectionEx") returned 0x75546740 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="CreateEventExW") returned 0x755466a0 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="CreateSemaphoreExW") returned 0x75546700 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="SetThreadStackGuarantee") returned 0x7553b040 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="CreateThreadpoolTimer") returned 0x7553ace0 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="SetThreadpoolTimer") returned 0x77197dc0 [0067.872] GetProcAddress (hModule=0x75520000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x771a4010 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="CloseThreadpoolTimer") returned 0x771a2a50 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="CreateThreadpoolWait") returned 0x7553a7b0 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="SetThreadpoolWait") returned 0x771a2290 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="CloseThreadpoolWait") returned 0x771a2910 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="FlushProcessWriteBuffers") returned 0x771c7a60 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x771bac00 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="GetCurrentProcessorNumber") returned 0x771aa890 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="GetLogicalProcessorInformation") returned 0x7553ac80 [0067.873] GetProcAddress (hModule=0x75520000, lpProcName="CreateSymbolicLinkW") returned 0x75560830 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="SetDefaultDllDirectories") returned 0x74966270 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="EnumSystemLocalesEx") returned 0x7553fe80 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="CompareStringEx") returned 0x7553ff80 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="GetDateFormatEx") returned 0x75560e00 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="GetLocaleInfoEx") returned 0x7553a750 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="GetTimeFormatEx") returned 0x75561240 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="GetUserDefaultLocaleName") returned 0x7553ad60 [0067.874] GetProcAddress (hModule=0x75520000, lpProcName="IsValidLocaleName") returned 0x75561460 [0067.875] GetProcAddress (hModule=0x75520000, lpProcName="LCMapStringEx") returned 0x75539a10 [0067.875] GetProcAddress (hModule=0x75520000, lpProcName="GetCurrentPackageId") returned 0x748eded0 [0067.875] GetProcAddress (hModule=0x75520000, lpProcName="GetTickCount64") returned 0x75533630 [0067.875] GetProcAddress (hModule=0x75520000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0067.875] GetProcAddress (hModule=0x75520000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0067.876] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x3bc) returned 0x48fa28 [0067.876] GetCurrentThreadId () returned 0xee0 [0067.876] GetCommandLineA () returned="\"C:\\Windows\\MsMpEng.exe\"" [0067.877] GetEnvironmentStringsW () returned 0x48fdf0* [0067.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1293 [0067.877] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x50d) returned 0x490818 [0067.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1293, lpMultiByteStr=0x490818, cbMultiByte=1293, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1293 [0067.877] FreeEnvironmentStringsW (penv=0x48fdf0) returned 1 [0067.877] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x18) returned 0x48a158 [0067.877] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x800) returned 0x48fdf0 [0067.877] GetStartupInfoW (in: lpStartupInfo=0xdf838 | out: lpStartupInfo=0xdf838*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\MsMpEng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x7be41cf4, hStdOutput=0xdf8ac, hStdError=0x6e375757)) [0067.877] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0067.877] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0067.877] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0067.877] GetLastError () returned 0x7f [0067.877] SetLastError (dwErrCode=0x7f) [0067.877] GetLastError () returned 0x7f [0067.877] SetLastError (dwErrCode=0x7f) [0067.878] GetLastError () returned 0x7f [0067.878] SetLastError (dwErrCode=0x7f) [0067.878] GetACP () returned 0x4e4 [0067.878] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x220) returned 0x490d30 [0067.878] GetLastError () returned 0x7f [0067.878] SetLastError (dwErrCode=0x7f) [0067.878] IsValidCodePage (CodePage=0x4e4) returned 1 [0067.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdf83c | out: lpCPInfo=0xdf83c) returned 1 [0067.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xdf304 | out: lpCPInfo=0xdf304) returned 1 [0067.878] GetLastError () returned 0x7f [0067.879] SetLastError (dwErrCode=0x7f) [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0xdf088, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0067.879] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0xdf318 | out: lpCharType=0xdf318) returned 1 [0067.879] GetLastError () returned 0x7f [0067.879] SetLastError (dwErrCode=0x7f) [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0xdf058, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0067.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0067.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdee48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0067.879] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0xdf618, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x14\x9dËVTø\r", lpUsedDefaultChar=0x0) returned 256 [0067.879] GetLastError () returned 0x7f [0067.879] SetLastError (dwErrCode=0x7f) [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xdf718, cbMultiByte=256, lpWideCharStr=0xdf068, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0067.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0067.879] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0xdee58, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0067.880] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0xdf518, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ\x14\x9dËVTø\r", lpUsedDefaultChar=0x0) returned 256 [0067.880] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x6e3d1168, nSize=0x104 | out: lpFilename="C:\\Windows\\MsMpEng.exe" (normalized: "c:\\windows\\msmpeng.exe")) returned 0x16 [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.880] SetLastError (dwErrCode=0x0) [0067.880] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.881] SetLastError (dwErrCode=0x0) [0067.881] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.882] SetLastError (dwErrCode=0x0) [0067.882] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x1f) returned 0x48ab00 [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.883] GetLastError () returned 0x0 [0067.883] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.884] SetLastError (dwErrCode=0x0) [0067.884] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] GetLastError () returned 0x0 [0067.885] SetLastError (dwErrCode=0x0) [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x90) returned 0x4905f8 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1f) returned 0x48a880 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x2e) returned 0x48e0d8 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x37) returned 0x48ef18 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x3c) returned 0x48edd0 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x31) returned 0x490f58 [0067.885] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x14) returned 0x48a198 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x24) returned 0x48ee18 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0xd) returned 0x48e430 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1d) returned 0x48a998 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x31) returned 0x490f98 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x15) returned 0x489f38 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x17) returned 0x48a1b8 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0xe) returned 0x48e508 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x69) returned 0x490690 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x3e) returned 0x490708 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1b) returned 0x48a920 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1d) returned 0x48a8d0 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x48) returned 0x490750 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x12) returned 0x48a1d8 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x18) returned 0x48a218 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1b) returned 0x48a948 [0067.886] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x24) returned 0x48dbf0 [0067.887] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x29) returned 0x48dee0 [0067.887] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1e) returned 0x48a9c0 [0067.887] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x6b) returned 0x4907a0 [0067.887] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x17) returned 0x489f58 [0067.887] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0xf) returned 0x48e3e8 [0067.892] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x16) returned 0x489f78 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x2a) returned 0x48df88 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x29) returned 0x48df18 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x12) returned 0x4910c8 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x21) returned 0x48d9c0 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x16) returned 0x491128 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x22) returned 0x48c160 [0067.893] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x12) returned 0x4911e8 [0067.893] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490818 | out: hHeap=0x480000) returned 1 [0067.894] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x800) returned 0x4917e0 [0067.894] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0067.894] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x80) returned 0x490818 [0067.895] RtlSizeHeap (HeapHandle=0x480000, Flags=0x0, MemoryPointer=0x490818) returned 0x80 [0067.895] DisableThreadLibraryCalls (hLibModule=0x6e310000) returned 1 [0067.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x6e3111b0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0xdff70 | out: lpThreadId=0xdff70*=0x140) returned 0x20 [0067.898] Sleep (dwMilliseconds=0x3e8) [0069.625] Sleep (dwMilliseconds=0x3e8) [0070.845] Sleep (dwMilliseconds=0x3e8) [0071.924] Sleep (dwMilliseconds=0x3e8) [0072.961] Sleep (dwMilliseconds=0x3e8) [0073.983] Sleep (dwMilliseconds=0x3e8) [0078.202] Sleep (dwMilliseconds=0x3e8) [0079.627] Sleep (dwMilliseconds=0x3e8) [0080.723] Sleep (dwMilliseconds=0x3e8) [0081.739] Sleep (dwMilliseconds=0x3e8) [0082.771] Sleep (dwMilliseconds=0x3e8) [0083.796] Sleep (dwMilliseconds=0x3e8) [0084.800] Sleep (dwMilliseconds=0x3e8) [0085.892] Sleep (dwMilliseconds=0x3e8) [0086.959] Sleep (dwMilliseconds=0x3e8) [0087.968] Sleep (dwMilliseconds=0x3e8) [0088.982] Sleep (dwMilliseconds=0x3e8) [0089.986] Sleep (dwMilliseconds=0x3e8) [0090.997] Sleep (dwMilliseconds=0x3e8) [0092.006] Sleep (dwMilliseconds=0x3e8) [0093.033] Sleep (dwMilliseconds=0x3e8) [0093.043] Sleep (dwMilliseconds=0x3e8) [0093.045] Sleep (dwMilliseconds=0x3e8) [0093.051] Sleep (dwMilliseconds=0x3e8) [0093.055] Sleep (dwMilliseconds=0x3e8) [0093.057] Sleep (dwMilliseconds=0x3e8) [0093.061] Sleep (dwMilliseconds=0x3e8) [0093.064] Sleep (dwMilliseconds=0x3e8) [0093.068] Sleep (dwMilliseconds=0x3e8) [0093.117] Sleep (dwMilliseconds=0x3e8) [0093.125] Sleep (dwMilliseconds=0x3e8) [0093.129] Sleep (dwMilliseconds=0x3e8) [0093.132] Sleep (dwMilliseconds=0x3e8) [0093.139] Sleep (dwMilliseconds=0x3e8) [0093.141] Sleep (dwMilliseconds=0x3e8) [0093.200] Sleep (dwMilliseconds=0x3e8) [0093.203] Sleep (dwMilliseconds=0x3e8) [0093.208] Sleep (dwMilliseconds=0x3e8) [0093.211] Sleep (dwMilliseconds=0x3e8) [0093.216] Sleep (dwMilliseconds=0x3e8) [0093.218] Sleep (dwMilliseconds=0x3e8) [0093.221] Sleep (dwMilliseconds=0x3e8) [0093.226] Sleep (dwMilliseconds=0x3e8) [0093.230] Sleep (dwMilliseconds=0x3e8) [0093.234] Sleep (dwMilliseconds=0x3e8) [0093.238] Sleep (dwMilliseconds=0x3e8) [0093.243] Sleep (dwMilliseconds=0x3e8) [0093.245] Sleep (dwMilliseconds=0x3e8) [0093.249] Sleep (dwMilliseconds=0x3e8) [0093.251] Sleep (dwMilliseconds=0x3e8) [0093.269] Sleep (dwMilliseconds=0x3e8) [0093.325] Sleep (dwMilliseconds=0x3e8) [0093.327] Sleep (dwMilliseconds=0x3e8) [0093.331] Sleep (dwMilliseconds=0x3e8) [0093.335] Sleep (dwMilliseconds=0x3e8) [0093.339] Sleep (dwMilliseconds=0x3e8) [0093.342] Sleep (dwMilliseconds=0x3e8) [0093.344] Sleep (dwMilliseconds=0x3e8) [0093.348] Sleep (dwMilliseconds=0x3e8) [0093.352] Sleep (dwMilliseconds=0x3e8) [0093.356] Sleep (dwMilliseconds=0x3e8) [0093.358] Sleep (dwMilliseconds=0x3e8) [0093.362] Sleep (dwMilliseconds=0x3e8) [0093.366] Sleep (dwMilliseconds=0x3e8) [0093.369] Sleep (dwMilliseconds=0x3e8) [0093.371] Sleep (dwMilliseconds=0x3e8) [0093.425] Sleep (dwMilliseconds=0x3e8) [0093.428] Sleep (dwMilliseconds=0x3e8) [0093.433] Sleep (dwMilliseconds=0x3e8) [0093.436] Sleep (dwMilliseconds=0x3e8) [0093.443] Sleep (dwMilliseconds=0x3e8) [0093.446] Sleep (dwMilliseconds=0x3e8) [0093.465] Sleep (dwMilliseconds=0x3e8) [0093.471] Sleep (dwMilliseconds=0x3e8) [0093.474] Sleep (dwMilliseconds=0x3e8) [0093.477] Sleep (dwMilliseconds=0x3e8) [0093.483] Sleep (dwMilliseconds=0x3e8) [0093.485] Sleep (dwMilliseconds=0x3e8) [0093.487] Sleep (dwMilliseconds=0x3e8) [0093.492] Sleep (dwMilliseconds=0x3e8) [0093.496] Sleep (dwMilliseconds=0x3e8) [0093.500] Sleep (dwMilliseconds=0x3e8) [0093.503] Sleep (dwMilliseconds=0x3e8) [0093.506] Sleep (dwMilliseconds=0x3e8) [0093.508] Sleep (dwMilliseconds=0x3e8) [0093.510] Sleep (dwMilliseconds=0x3e8) [0093.515] Sleep (dwMilliseconds=0x3e8) [0093.570] Sleep (dwMilliseconds=0x3e8) [0093.574] Sleep (dwMilliseconds=0x3e8) [0093.579] Sleep (dwMilliseconds=0x3e8) [0093.583] Sleep (dwMilliseconds=0x3e8) [0093.603] Sleep (dwMilliseconds=0x3e8) [0093.606] Sleep (dwMilliseconds=0x3e8) [0093.615] Sleep (dwMilliseconds=0x3e8) [0093.618] Sleep (dwMilliseconds=0x3e8) [0093.622] Sleep (dwMilliseconds=0x3e8) [0093.626] Sleep (dwMilliseconds=0x3e8) [0093.632] Sleep (dwMilliseconds=0x3e8) [0093.726] Sleep (dwMilliseconds=0x3e8) [0093.730] Sleep (dwMilliseconds=0x3e8) [0093.733] Sleep (dwMilliseconds=0x3e8) [0093.735] Sleep (dwMilliseconds=0x3e8) [0093.740] Sleep (dwMilliseconds=0x3e8) [0093.743] Sleep (dwMilliseconds=0x3e8) [0093.746] Sleep (dwMilliseconds=0x3e8) [0093.749] Sleep (dwMilliseconds=0x3e8) [0093.752] Sleep (dwMilliseconds=0x3e8) [0093.755] Sleep (dwMilliseconds=0x3e8) [0093.757] Sleep (dwMilliseconds=0x3e8) [0093.759] Sleep (dwMilliseconds=0x3e8) [0093.761] Sleep (dwMilliseconds=0x3e8) [0093.787] Sleep (dwMilliseconds=0x3e8) [0093.792] Sleep (dwMilliseconds=0x3e8) [0093.794] Sleep (dwMilliseconds=0x3e8) [0093.798] Sleep (dwMilliseconds=0x3e8) [0093.801] Sleep (dwMilliseconds=0x3e8) [0093.804] Sleep (dwMilliseconds=0x3e8) [0093.806] Sleep (dwMilliseconds=0x3e8) [0093.808] Sleep (dwMilliseconds=0x3e8) [0093.811] Sleep (dwMilliseconds=0x3e8) [0093.815] Sleep (dwMilliseconds=0x3e8) [0093.817] Sleep (dwMilliseconds=0x3e8) [0093.819] Sleep (dwMilliseconds=0x3e8) [0093.878] Sleep (dwMilliseconds=0x3e8) [0093.881] Sleep (dwMilliseconds=0x3e8) [0093.884] Sleep (dwMilliseconds=0x3e8) [0093.887] Sleep (dwMilliseconds=0x3e8) [0093.889] Sleep (dwMilliseconds=0x3e8) [0093.892] Sleep (dwMilliseconds=0x3e8) [0093.895] Sleep (dwMilliseconds=0x3e8) [0093.897] Sleep (dwMilliseconds=0x3e8) [0093.938] Sleep (dwMilliseconds=0x3e8) [0093.941] Sleep (dwMilliseconds=0x3e8) [0093.943] Sleep (dwMilliseconds=0x3e8) [0093.946] Sleep (dwMilliseconds=0x3e8) [0093.949] Sleep (dwMilliseconds=0x3e8) [0093.951] Sleep (dwMilliseconds=0x3e8) [0093.953] Sleep (dwMilliseconds=0x3e8) [0093.955] Sleep (dwMilliseconds=0x3e8) [0094.000] Sleep (dwMilliseconds=0x3e8) [0094.004] Sleep (dwMilliseconds=0x3e8) [0094.008] Sleep (dwMilliseconds=0x3e8) [0094.011] Sleep (dwMilliseconds=0x3e8) [0094.013] Sleep (dwMilliseconds=0x3e8) [0094.016] Sleep (dwMilliseconds=0x3e8) [0094.019] Sleep (dwMilliseconds=0x3e8) [0094.022] Sleep (dwMilliseconds=0x3e8) [0094.028] Sleep (dwMilliseconds=0x3e8) [0094.031] Sleep (dwMilliseconds=0x3e8) [0094.036] Sleep (dwMilliseconds=0x3e8) [0094.186] Sleep (dwMilliseconds=0x3e8) [0094.224] Sleep (dwMilliseconds=0x3e8) [0094.227] Sleep (dwMilliseconds=0x3e8) [0094.229] Sleep (dwMilliseconds=0x3e8) [0094.235] Sleep (dwMilliseconds=0x3e8) [0094.239] Sleep (dwMilliseconds=0x3e8) [0094.242] Sleep (dwMilliseconds=0x3e8) [0094.246] Sleep (dwMilliseconds=0x3e8) [0094.250] Sleep (dwMilliseconds=0x3e8) [0094.311] Sleep (dwMilliseconds=0x3e8) [0094.318] Sleep (dwMilliseconds=0x3e8) [0094.321] Sleep (dwMilliseconds=0x3e8) [0094.323] Sleep (dwMilliseconds=0x3e8) [0094.326] Sleep (dwMilliseconds=0x3e8) [0094.333] Sleep (dwMilliseconds=0x3e8) [0094.339] Sleep (dwMilliseconds=0x3e8) [0094.343] Sleep (dwMilliseconds=0x3e8) [0094.345] Sleep (dwMilliseconds=0x3e8) [0094.347] Sleep (dwMilliseconds=0x3e8) [0094.350] Sleep (dwMilliseconds=0x3e8) [0094.388] Sleep (dwMilliseconds=0x3e8) [0094.392] Sleep (dwMilliseconds=0x3e8) [0094.395] Sleep (dwMilliseconds=0x3e8) [0094.399] Sleep (dwMilliseconds=0x3e8) [0094.402] Sleep (dwMilliseconds=0x3e8) [0094.408] Sleep (dwMilliseconds=0x3e8) [0094.451] Sleep (dwMilliseconds=0x3e8) [0094.455] Sleep (dwMilliseconds=0x3e8) [0094.458] Sleep (dwMilliseconds=0x3e8) [0094.460] Sleep (dwMilliseconds=0x3e8) [0094.462] Sleep (dwMilliseconds=0x3e8) [0094.468] Sleep (dwMilliseconds=0x3e8) [0094.470] Sleep (dwMilliseconds=0x3e8) [0094.473] Sleep (dwMilliseconds=0x3e8) [0094.477] Sleep (dwMilliseconds=0x3e8) [0094.480] Sleep (dwMilliseconds=0x3e8) [0094.482] Sleep (dwMilliseconds=0x3e8) [0094.484] Sleep (dwMilliseconds=0x3e8) [0094.535] Sleep (dwMilliseconds=0x3e8) [0094.538] Sleep (dwMilliseconds=0x3e8) [0094.544] Sleep (dwMilliseconds=0x3e8) [0094.556] Sleep (dwMilliseconds=0x3e8) [0094.586] Sleep (dwMilliseconds=0x3e8) [0094.591] Sleep (dwMilliseconds=0x3e8) [0094.601] Sleep (dwMilliseconds=0x3e8) [0094.634] Sleep (dwMilliseconds=0x3e8) [0094.651] Sleep (dwMilliseconds=0x3e8) [0095.523] Sleep (dwMilliseconds=0x3e8) [0095.569] Sleep (dwMilliseconds=0x3e8) [0095.572] Sleep (dwMilliseconds=0x3e8) [0095.585] Sleep (dwMilliseconds=0x3e8) [0095.590] Sleep (dwMilliseconds=0x3e8) [0095.594] Sleep (dwMilliseconds=0x3e8) [0095.598] Sleep (dwMilliseconds=0x3e8) [0095.601] Sleep (dwMilliseconds=0x3e8) [0095.607] Sleep (dwMilliseconds=0x3e8) [0095.619] Sleep (dwMilliseconds=0x3e8) [0096.050] Sleep (dwMilliseconds=0x3e8) [0096.092] Sleep (dwMilliseconds=0x3e8) [0096.131] Sleep (dwMilliseconds=0x3e8) [0096.169] Sleep (dwMilliseconds=0x3e8) [0096.201] Sleep (dwMilliseconds=0x3e8) [0096.487] Sleep (dwMilliseconds=0x3e8) [0097.080] Sleep (dwMilliseconds=0x3e8) [0097.126] Sleep (dwMilliseconds=0x3e8) [0097.330] Sleep (dwMilliseconds=0x3e8) [0097.338] Sleep (dwMilliseconds=0x3e8) [0097.342] Sleep (dwMilliseconds=0x3e8) [0097.344] Sleep (dwMilliseconds=0x3e8) [0097.345] Sleep (dwMilliseconds=0x3e8) [0097.347] Sleep (dwMilliseconds=0x3e8) [0097.350] Sleep (dwMilliseconds=0x3e8) [0097.351] Sleep (dwMilliseconds=0x3e8) [0097.353] Sleep (dwMilliseconds=0x3e8) [0097.355] Sleep (dwMilliseconds=0x3e8) [0097.357] Sleep (dwMilliseconds=0x3e8) [0097.359] Sleep (dwMilliseconds=0x3e8) [0097.361] Sleep (dwMilliseconds=0x3e8) [0097.363] Sleep (dwMilliseconds=0x3e8) [0097.366] Sleep (dwMilliseconds=0x3e8) [0097.367] Sleep (dwMilliseconds=0x3e8) [0097.369] Sleep (dwMilliseconds=0x3e8) [0097.371] Sleep (dwMilliseconds=0x3e8) [0097.373] Sleep (dwMilliseconds=0x3e8) [0097.375] Sleep (dwMilliseconds=0x3e8) [0097.377] Sleep (dwMilliseconds=0x3e8) [0097.379] Sleep (dwMilliseconds=0x3e8) [0097.381] Sleep (dwMilliseconds=0x3e8) [0097.383] Sleep (dwMilliseconds=0x3e8) [0097.385] Sleep (dwMilliseconds=0x3e8) [0097.387] Sleep (dwMilliseconds=0x3e8) [0097.389] Sleep (dwMilliseconds=0x3e8) [0097.390] Sleep (dwMilliseconds=0x3e8) [0097.392] Sleep (dwMilliseconds=0x3e8) [0097.394] Sleep (dwMilliseconds=0x3e8) [0097.396] Sleep (dwMilliseconds=0x3e8) [0097.398] Sleep (dwMilliseconds=0x3e8) [0097.400] Sleep (dwMilliseconds=0x3e8) [0097.402] Sleep (dwMilliseconds=0x3e8) [0097.405] Sleep (dwMilliseconds=0x3e8) [0097.406] Sleep (dwMilliseconds=0x3e8) [0097.408] Sleep (dwMilliseconds=0x3e8) [0097.410] Sleep (dwMilliseconds=0x3e8) [0097.414] Sleep (dwMilliseconds=0x3e8) [0097.415] Sleep (dwMilliseconds=0x3e8) [0097.418] Sleep (dwMilliseconds=0x3e8) [0097.420] Sleep (dwMilliseconds=0x3e8) [0097.422] Sleep (dwMilliseconds=0x3e8) [0097.423] Sleep (dwMilliseconds=0x3e8) [0097.425] Sleep (dwMilliseconds=0x3e8) [0097.428] Sleep (dwMilliseconds=0x3e8) [0097.429] Sleep (dwMilliseconds=0x3e8) [0097.431] Sleep (dwMilliseconds=0x3e8) [0097.433] Sleep (dwMilliseconds=0x3e8) [0097.436] Sleep (dwMilliseconds=0x3e8) [0097.438] Sleep (dwMilliseconds=0x3e8) [0097.439] Sleep (dwMilliseconds=0x3e8) [0097.441] Sleep (dwMilliseconds=0x3e8) [0097.468] Sleep (dwMilliseconds=0x3e8) [0097.485] Sleep (dwMilliseconds=0x3e8) [0097.487] Sleep (dwMilliseconds=0x3e8) [0097.488] Sleep (dwMilliseconds=0x3e8) [0097.496] Sleep (dwMilliseconds=0x3e8) [0097.499] Sleep (dwMilliseconds=0x3e8) [0097.501] Sleep (dwMilliseconds=0x3e8) [0097.502] Sleep (dwMilliseconds=0x3e8) [0097.504] Sleep (dwMilliseconds=0x3e8) [0097.506] Sleep (dwMilliseconds=0x3e8) [0097.508] Sleep (dwMilliseconds=0x3e8) [0097.510] Sleep (dwMilliseconds=0x3e8) [0097.512] Sleep (dwMilliseconds=0x3e8) [0097.514] Sleep (dwMilliseconds=0x3e8) [0097.517] Sleep (dwMilliseconds=0x3e8) [0097.519] Sleep (dwMilliseconds=0x3e8) [0097.520] Sleep (dwMilliseconds=0x3e8) [0097.522] Sleep (dwMilliseconds=0x3e8) [0097.524] Sleep (dwMilliseconds=0x3e8) [0097.526] Sleep (dwMilliseconds=0x3e8) [0097.528] Sleep (dwMilliseconds=0x3e8) [0097.529] Sleep (dwMilliseconds=0x3e8) [0097.531] Sleep (dwMilliseconds=0x3e8) [0097.533] Sleep (dwMilliseconds=0x3e8) [0097.535] Sleep (dwMilliseconds=0x3e8) [0097.537] Sleep (dwMilliseconds=0x3e8) [0097.539] Sleep (dwMilliseconds=0x3e8) [0097.541] Sleep (dwMilliseconds=0x3e8) [0097.543] Sleep (dwMilliseconds=0x3e8) [0097.545] Sleep (dwMilliseconds=0x3e8) [0097.548] Sleep (dwMilliseconds=0x3e8) [0097.550] Sleep (dwMilliseconds=0x3e8) [0097.552] Sleep (dwMilliseconds=0x3e8) [0097.554] Sleep (dwMilliseconds=0x3e8) [0097.556] Sleep (dwMilliseconds=0x3e8) [0097.559] Sleep (dwMilliseconds=0x3e8) [0097.560] Sleep (dwMilliseconds=0x3e8) [0097.562] Sleep (dwMilliseconds=0x3e8) [0097.565] Sleep (dwMilliseconds=0x3e8) [0097.571] Sleep (dwMilliseconds=0x3e8) [0097.574] Sleep (dwMilliseconds=0x3e8) [0097.576] Sleep (dwMilliseconds=0x3e8) [0097.579] Sleep (dwMilliseconds=0x3e8) [0097.581] Sleep (dwMilliseconds=0x3e8) [0097.583] Sleep (dwMilliseconds=0x3e8) [0097.585] Sleep (dwMilliseconds=0x3e8) [0097.587] Sleep (dwMilliseconds=0x3e8) [0097.589] Sleep (dwMilliseconds=0x3e8) [0097.591] Sleep (dwMilliseconds=0x3e8) [0097.596] Sleep (dwMilliseconds=0x3e8) [0097.601] Sleep (dwMilliseconds=0x3e8) [0097.603] Sleep (dwMilliseconds=0x3e8) [0097.605] Sleep (dwMilliseconds=0x3e8) [0097.607] Sleep (dwMilliseconds=0x3e8) [0097.610] Sleep (dwMilliseconds=0x3e8) [0097.611] Sleep (dwMilliseconds=0x3e8) [0097.613] Sleep (dwMilliseconds=0x3e8) [0097.615] Sleep (dwMilliseconds=0x3e8) [0097.617] Sleep (dwMilliseconds=0x3e8) [0097.619] Sleep (dwMilliseconds=0x3e8) [0098.050] Sleep (dwMilliseconds=0x3e8) [0098.053] Sleep (dwMilliseconds=0x3e8) [0098.054] Sleep (dwMilliseconds=0x3e8) [0098.056] Sleep (dwMilliseconds=0x3e8) [0098.061] Sleep (dwMilliseconds=0x3e8) [0098.064] Sleep (dwMilliseconds=0x3e8) [0098.065] Sleep (dwMilliseconds=0x3e8) [0098.067] Sleep (dwMilliseconds=0x3e8) [0098.069] Sleep (dwMilliseconds=0x3e8) [0098.071] Sleep (dwMilliseconds=0x3e8) [0098.073] Sleep (dwMilliseconds=0x3e8) [0098.075] Sleep (dwMilliseconds=0x3e8) [0098.077] Sleep (dwMilliseconds=0x3e8) [0098.079] Sleep (dwMilliseconds=0x3e8) [0098.081] Sleep (dwMilliseconds=0x3e8) [0098.086] Sleep (dwMilliseconds=0x3e8) [0098.100] Sleep (dwMilliseconds=0x3e8) [0098.102] Sleep (dwMilliseconds=0x3e8) [0098.104] Sleep (dwMilliseconds=0x3e8) [0098.105] Sleep (dwMilliseconds=0x3e8) [0098.108] Sleep (dwMilliseconds=0x3e8) [0098.111] Sleep (dwMilliseconds=0x3e8) [0098.112] Sleep (dwMilliseconds=0x3e8) [0098.114] Sleep (dwMilliseconds=0x3e8) [0098.116] Sleep (dwMilliseconds=0x3e8) [0098.118] Sleep (dwMilliseconds=0x3e8) [0098.120] Sleep (dwMilliseconds=0x3e8) [0098.137] Sleep (dwMilliseconds=0x3e8) [0098.139] Sleep (dwMilliseconds=0x3e8) [0098.140] Sleep (dwMilliseconds=0x3e8) [0098.142] Sleep (dwMilliseconds=0x3e8) [0098.145] Sleep (dwMilliseconds=0x3e8) [0098.146] Sleep (dwMilliseconds=0x3e8) [0098.151] Sleep (dwMilliseconds=0x3e8) [0098.153] Sleep (dwMilliseconds=0x3e8) [0098.154] Sleep (dwMilliseconds=0x3e8) [0098.156] Sleep (dwMilliseconds=0x3e8) [0098.158] Sleep (dwMilliseconds=0x3e8) [0099.104] Sleep (dwMilliseconds=0x3e8) [0099.115] Sleep (dwMilliseconds=0x3e8) [0099.116] Sleep (dwMilliseconds=0x3e8) [0099.118] Sleep (dwMilliseconds=0x3e8) [0099.120] Sleep (dwMilliseconds=0x3e8) [0099.122] Sleep (dwMilliseconds=0x3e8) [0099.124] Sleep (dwMilliseconds=0x3e8) [0099.128] Sleep (dwMilliseconds=0x3e8) [0099.132] Sleep (dwMilliseconds=0x3e8) [0099.133] Sleep (dwMilliseconds=0x3e8) [0099.135] Sleep (dwMilliseconds=0x3e8) [0099.137] Sleep (dwMilliseconds=0x3e8) [0099.139] Sleep (dwMilliseconds=0x3e8) [0099.141] Sleep (dwMilliseconds=0x3e8) [0099.632] Sleep (dwMilliseconds=0x3e8) [0099.634] Sleep (dwMilliseconds=0x3e8) [0099.636] Sleep (dwMilliseconds=0x3e8) [0099.644] Sleep (dwMilliseconds=0x3e8) [0099.646] Sleep (dwMilliseconds=0x3e8) [0099.648] Sleep (dwMilliseconds=0x3e8) [0099.861] Sleep (dwMilliseconds=0x3e8) [0100.518] Sleep (dwMilliseconds=0x3e8) [0100.856] Sleep (dwMilliseconds=0x3e8) [0100.859] Sleep (dwMilliseconds=0x3e8) [0100.866] Sleep (dwMilliseconds=0x3e8) [0100.870] Sleep (dwMilliseconds=0x3e8) [0100.878] Sleep (dwMilliseconds=0x3e8) [0100.884] Sleep (dwMilliseconds=0x3e8) [0103.340] Sleep (dwMilliseconds=0x3e8) [0103.345] Sleep (dwMilliseconds=0x3e8) [0103.346] Sleep (dwMilliseconds=0x3e8) [0103.348] Sleep (dwMilliseconds=0x3e8) [0103.350] Sleep (dwMilliseconds=0x3e8) [0103.352] Sleep (dwMilliseconds=0x3e8) [0103.354] Sleep (dwMilliseconds=0x3e8) [0103.357] Sleep (dwMilliseconds=0x3e8) [0103.635] Sleep (dwMilliseconds=0x3e8) [0103.636] Sleep (dwMilliseconds=0x3e8) [0103.638] Sleep (dwMilliseconds=0x3e8) [0103.640] Sleep (dwMilliseconds=0x3e8) [0103.642] Sleep (dwMilliseconds=0x3e8) [0103.645] Sleep (dwMilliseconds=0x3e8) [0103.646] Sleep (dwMilliseconds=0x3e8) [0103.648] Sleep (dwMilliseconds=0x3e8) [0103.651] Sleep (dwMilliseconds=0x3e8) [0103.652] Sleep (dwMilliseconds=0x3e8) [0103.654] Sleep (dwMilliseconds=0x3e8) [0103.656] Sleep (dwMilliseconds=0x3e8) [0103.660] Sleep (dwMilliseconds=0x3e8) [0103.661] Sleep (dwMilliseconds=0x3e8) [0103.663] Sleep (dwMilliseconds=0x3e8) [0103.665] Sleep (dwMilliseconds=0x3e8) [0103.667] Sleep (dwMilliseconds=0x3e8) [0103.670] Sleep (dwMilliseconds=0x3e8) [0103.672] Sleep (dwMilliseconds=0x3e8) [0103.674] Sleep (dwMilliseconds=0x3e8) [0103.676] Sleep (dwMilliseconds=0x3e8) [0103.678] Sleep (dwMilliseconds=0x3e8) [0103.680] Sleep (dwMilliseconds=0x3e8) [0103.682] Sleep (dwMilliseconds=0x3e8) [0103.684] Sleep (dwMilliseconds=0x3e8) [0103.686] Sleep (dwMilliseconds=0x3e8) [0103.688] Sleep (dwMilliseconds=0x3e8) [0103.690] Sleep (dwMilliseconds=0x3e8) [0103.692] Sleep (dwMilliseconds=0x3e8) [0103.695] Sleep (dwMilliseconds=0x3e8) [0103.697] Sleep (dwMilliseconds=0x3e8) [0103.699] Sleep (dwMilliseconds=0x3e8) [0103.701] Sleep (dwMilliseconds=0x3e8) [0103.703] Sleep (dwMilliseconds=0x3e8) [0103.705] Sleep (dwMilliseconds=0x3e8) [0103.707] Sleep (dwMilliseconds=0x3e8) [0103.709] Sleep (dwMilliseconds=0x3e8) [0103.711] Sleep (dwMilliseconds=0x3e8) [0103.713] Sleep (dwMilliseconds=0x3e8) [0103.715] Sleep (dwMilliseconds=0x3e8) [0103.717] Sleep (dwMilliseconds=0x3e8) [0103.720] Sleep (dwMilliseconds=0x3e8) [0103.721] Sleep (dwMilliseconds=0x3e8) [0103.723] Sleep (dwMilliseconds=0x3e8) [0103.725] Sleep (dwMilliseconds=0x3e8) [0103.729] Sleep (dwMilliseconds=0x3e8) [0103.730] Sleep (dwMilliseconds=0x3e8) [0103.732] Sleep (dwMilliseconds=0x3e8) [0103.735] Sleep (dwMilliseconds=0x3e8) [0103.736] Sleep (dwMilliseconds=0x3e8) [0103.738] Sleep (dwMilliseconds=0x3e8) [0103.740] Sleep (dwMilliseconds=0x3e8) [0103.742] Sleep (dwMilliseconds=0x3e8) [0103.745] Sleep (dwMilliseconds=0x3e8) [0103.747] Sleep (dwMilliseconds=0x3e8) [0103.749] Sleep (dwMilliseconds=0x3e8) [0103.752] Sleep (dwMilliseconds=0x3e8) [0103.754] Sleep (dwMilliseconds=0x3e8) [0103.756] Sleep (dwMilliseconds=0x3e8) [0103.758] Sleep (dwMilliseconds=0x3e8) [0103.761] Sleep (dwMilliseconds=0x3e8) [0103.763] Sleep (dwMilliseconds=0x3e8) [0103.765] Sleep (dwMilliseconds=0x3e8) [0103.767] Sleep (dwMilliseconds=0x3e8) [0103.769] Sleep (dwMilliseconds=0x3e8) [0103.771] Sleep (dwMilliseconds=0x3e8) [0103.773] Sleep (dwMilliseconds=0x3e8) [0103.775] Sleep (dwMilliseconds=0x3e8) [0103.777] Sleep (dwMilliseconds=0x3e8) [0103.779] Sleep (dwMilliseconds=0x3e8) [0103.780] Sleep (dwMilliseconds=0x3e8) [0103.782] Sleep (dwMilliseconds=0x3e8) [0103.784] Sleep (dwMilliseconds=0x3e8) [0103.786] Sleep (dwMilliseconds=0x3e8) [0103.788] Sleep (dwMilliseconds=0x3e8) [0103.790] Sleep (dwMilliseconds=0x3e8) [0103.791] Sleep (dwMilliseconds=0x3e8) [0103.793] Sleep (dwMilliseconds=0x3e8) [0103.795] Sleep (dwMilliseconds=0x3e8) [0103.797] Sleep (dwMilliseconds=0x3e8) [0103.799] Sleep (dwMilliseconds=0x3e8) [0103.801] Sleep (dwMilliseconds=0x3e8) [0103.806] Sleep (dwMilliseconds=0x3e8) [0103.807] Sleep (dwMilliseconds=0x3e8) [0103.809] Sleep (dwMilliseconds=0x3e8) [0103.811] Sleep (dwMilliseconds=0x3e8) [0103.813] Sleep (dwMilliseconds=0x3e8) [0103.815] Sleep (dwMilliseconds=0x3e8) [0103.817] Sleep (dwMilliseconds=0x3e8) [0103.819] Sleep (dwMilliseconds=0x3e8) [0103.820] Sleep (dwMilliseconds=0x3e8) [0103.822] Sleep (dwMilliseconds=0x3e8) [0103.824] Sleep (dwMilliseconds=0x3e8) [0103.826] Sleep (dwMilliseconds=0x3e8) [0103.828] Sleep (dwMilliseconds=0x3e8) [0103.830] Sleep (dwMilliseconds=0x3e8) [0103.832] Sleep (dwMilliseconds=0x3e8) [0103.836] Sleep (dwMilliseconds=0x3e8) [0103.837] Sleep (dwMilliseconds=0x3e8) [0103.839] Sleep (dwMilliseconds=0x3e8) [0103.841] Sleep (dwMilliseconds=0x3e8) [0103.843] Sleep (dwMilliseconds=0x3e8) [0103.845] Sleep (dwMilliseconds=0x3e8) [0103.847] Sleep (dwMilliseconds=0x3e8) [0103.849] Sleep (dwMilliseconds=0x3e8) [0103.852] Sleep (dwMilliseconds=0x3e8) [0103.853] Sleep (dwMilliseconds=0x3e8) [0103.855] Sleep (dwMilliseconds=0x3e8) [0103.857] Sleep (dwMilliseconds=0x3e8) [0103.859] Sleep (dwMilliseconds=0x3e8) [0103.862] Sleep (dwMilliseconds=0x3e8) [0103.863] Sleep (dwMilliseconds=0x3e8) [0103.865] Sleep (dwMilliseconds=0x3e8) [0103.872] Sleep (dwMilliseconds=0x3e8) [0103.874] Sleep (dwMilliseconds=0x3e8) [0103.884] Sleep (dwMilliseconds=0x3e8) [0103.885] Sleep (dwMilliseconds=0x3e8) [0103.887] Sleep (dwMilliseconds=0x3e8) [0103.891] Sleep (dwMilliseconds=0x3e8) [0103.893] Sleep (dwMilliseconds=0x3e8) [0103.894] Sleep (dwMilliseconds=0x3e8) [0103.897] Sleep (dwMilliseconds=0x3e8) [0103.898] Sleep (dwMilliseconds=0x3e8) [0103.900] Sleep (dwMilliseconds=0x3e8) [0103.902] Sleep (dwMilliseconds=0x3e8) [0103.905] Sleep (dwMilliseconds=0x3e8) [0103.906] Sleep (dwMilliseconds=0x3e8) [0103.908] Sleep (dwMilliseconds=0x3e8) [0103.911] Sleep (dwMilliseconds=0x3e8) [0103.912] Sleep (dwMilliseconds=0x3e8) [0103.914] Sleep (dwMilliseconds=0x3e8) [0103.916] Sleep (dwMilliseconds=0x3e8) [0103.918] Sleep (dwMilliseconds=0x3e8) [0103.919] Sleep (dwMilliseconds=0x3e8) [0103.921] Sleep (dwMilliseconds=0x3e8) [0103.923] Sleep (dwMilliseconds=0x3e8) [0103.925] Sleep (dwMilliseconds=0x3e8) [0103.927] Sleep (dwMilliseconds=0x3e8) [0103.930] Sleep (dwMilliseconds=0x3e8) [0103.933] Sleep (dwMilliseconds=0x3e8) [0103.934] Sleep (dwMilliseconds=0x3e8) [0103.937] Sleep (dwMilliseconds=0x3e8) [0103.942] Sleep (dwMilliseconds=0x3e8) [0103.947] Sleep (dwMilliseconds=0x3e8) [0103.948] Sleep (dwMilliseconds=0x3e8) [0103.953] Sleep (dwMilliseconds=0x3e8) [0103.954] Sleep (dwMilliseconds=0x3e8) [0103.956] Sleep (dwMilliseconds=0x3e8) [0103.959] Sleep (dwMilliseconds=0x3e8) [0103.963] Sleep (dwMilliseconds=0x3e8) [0103.968] Sleep (dwMilliseconds=0x3e8) [0103.969] Sleep (dwMilliseconds=0x3e8) [0103.972] Sleep (dwMilliseconds=0x3e8) [0103.973] Sleep (dwMilliseconds=0x3e8) [0103.975] Sleep (dwMilliseconds=0x3e8) [0103.977] Sleep (dwMilliseconds=0x3e8) [0103.979] Sleep (dwMilliseconds=0x3e8) [0103.981] Sleep (dwMilliseconds=0x3e8) [0103.983] Sleep (dwMilliseconds=0x3e8) [0103.985] Sleep (dwMilliseconds=0x3e8) [0103.987] Sleep (dwMilliseconds=0x3e8) [0103.989] Sleep (dwMilliseconds=0x3e8) [0103.991] Sleep (dwMilliseconds=0x3e8) [0103.993] Sleep (dwMilliseconds=0x3e8) [0103.995] Sleep (dwMilliseconds=0x3e8) [0104.105] Sleep (dwMilliseconds=0x3e8) [0104.109] Sleep (dwMilliseconds=0x3e8) [0104.114] Sleep (dwMilliseconds=0x3e8) [0104.122] Sleep (dwMilliseconds=0x3e8) [0104.128] Sleep (dwMilliseconds=0x3e8) [0104.129] Sleep (dwMilliseconds=0x3e8) [0104.132] Sleep (dwMilliseconds=0x3e8) [0104.133] Sleep (dwMilliseconds=0x3e8) [0104.135] Sleep (dwMilliseconds=0x3e8) [0104.139] Sleep (dwMilliseconds=0x3e8) [0104.140] Sleep (dwMilliseconds=0x3e8) [0104.857] Sleep (dwMilliseconds=0x3e8) [0106.029] Sleep (dwMilliseconds=0x3e8) [0106.031] Sleep (dwMilliseconds=0x3e8) [0106.057] Sleep (dwMilliseconds=0x3e8) [0106.059] Sleep (dwMilliseconds=0x3e8) [0106.061] Sleep (dwMilliseconds=0x3e8) [0106.063] Sleep (dwMilliseconds=0x3e8) [0106.065] Sleep (dwMilliseconds=0x3e8) [0106.067] Sleep (dwMilliseconds=0x3e8) [0106.069] Sleep (dwMilliseconds=0x3e8) [0106.071] Sleep (dwMilliseconds=0x3e8) [0106.111] Sleep (dwMilliseconds=0x3e8) [0106.115] Sleep (dwMilliseconds=0x3e8) [0106.118] Sleep (dwMilliseconds=0x3e8) [0106.120] Sleep (dwMilliseconds=0x3e8) [0106.127] Sleep (dwMilliseconds=0x3e8) [0106.140] Sleep (dwMilliseconds=0x3e8) [0106.141] Sleep (dwMilliseconds=0x3e8) [0106.144] Sleep (dwMilliseconds=0x3e8) [0106.146] Sleep (dwMilliseconds=0x3e8) [0106.152] Sleep (dwMilliseconds=0x3e8) [0106.153] Sleep (dwMilliseconds=0x3e8) [0106.605] Sleep (dwMilliseconds=0x3e8) [0106.606] Sleep (dwMilliseconds=0x3e8) [0106.608] Sleep (dwMilliseconds=0x3e8) [0106.610] Sleep (dwMilliseconds=0x3e8) [0106.612] Sleep (dwMilliseconds=0x3e8) [0106.614] Sleep (dwMilliseconds=0x3e8) [0106.616] Sleep (dwMilliseconds=0x3e8) [0106.618] Sleep (dwMilliseconds=0x3e8) [0106.620] Sleep (dwMilliseconds=0x3e8) [0106.622] Sleep (dwMilliseconds=0x3e8) [0106.624] Sleep (dwMilliseconds=0x3e8) [0106.627] Sleep (dwMilliseconds=0x3e8) [0106.628] Sleep (dwMilliseconds=0x3e8) [0106.630] Sleep (dwMilliseconds=0x3e8) [0106.633] Sleep (dwMilliseconds=0x3e8) [0106.634] Sleep (dwMilliseconds=0x3e8) [0106.636] Sleep (dwMilliseconds=0x3e8) [0106.638] Sleep (dwMilliseconds=0x3e8) [0106.641] Sleep (dwMilliseconds=0x3e8) [0106.643] Sleep (dwMilliseconds=0x3e8) [0106.645] Sleep (dwMilliseconds=0x3e8) [0106.647] Sleep (dwMilliseconds=0x3e8) [0106.649] Sleep (dwMilliseconds=0x3e8) [0106.651] Sleep (dwMilliseconds=0x3e8) [0106.652] Sleep (dwMilliseconds=0x3e8) [0106.654] Sleep (dwMilliseconds=0x3e8) [0106.657] Sleep (dwMilliseconds=0x3e8) [0106.659] Sleep (dwMilliseconds=0x3e8) [0106.660] Sleep (dwMilliseconds=0x3e8) [0106.662] Sleep (dwMilliseconds=0x3e8) [0106.664] Sleep (dwMilliseconds=0x3e8) [0106.667] Sleep (dwMilliseconds=0x3e8) [0106.669] Sleep (dwMilliseconds=0x3e8) [0106.671] Sleep (dwMilliseconds=0x3e8) [0106.675] Sleep (dwMilliseconds=0x3e8) [0106.676] Sleep (dwMilliseconds=0x3e8) [0106.678] Sleep (dwMilliseconds=0x3e8) [0106.680] Sleep (dwMilliseconds=0x3e8) [0106.682] Sleep (dwMilliseconds=0x3e8) [0106.684] Sleep (dwMilliseconds=0x3e8) [0106.686] Sleep (dwMilliseconds=0x3e8) [0106.695] Sleep (dwMilliseconds=0x3e8) [0106.698] Sleep (dwMilliseconds=0x3e8) [0106.699] Sleep (dwMilliseconds=0x3e8) [0106.702] Sleep (dwMilliseconds=0x3e8) [0106.705] Sleep (dwMilliseconds=0x3e8) [0106.706] Sleep (dwMilliseconds=0x3e8) [0106.709] Sleep (dwMilliseconds=0x3e8) [0106.711] Sleep (dwMilliseconds=0x3e8) [0106.715] Sleep (dwMilliseconds=0x3e8) [0106.717] Sleep (dwMilliseconds=0x3e8) [0106.719] Sleep (dwMilliseconds=0x3e8) [0106.721] Sleep (dwMilliseconds=0x3e8) [0106.723] Sleep (dwMilliseconds=0x3e8) [0106.726] Sleep (dwMilliseconds=0x3e8) [0106.728] Sleep (dwMilliseconds=0x3e8) [0106.729] Sleep (dwMilliseconds=0x3e8) [0106.731] Sleep (dwMilliseconds=0x3e8) [0106.733] Sleep (dwMilliseconds=0x3e8) [0106.735] Sleep (dwMilliseconds=0x3e8) [0106.738] Sleep (dwMilliseconds=0x3e8) [0106.739] Sleep (dwMilliseconds=0x3e8) [0106.741] Sleep (dwMilliseconds=0x3e8) [0106.743] Sleep (dwMilliseconds=0x3e8) [0106.745] Sleep (dwMilliseconds=0x3e8) [0106.747] Sleep (dwMilliseconds=0x3e8) [0106.749] Sleep (dwMilliseconds=0x3e8) [0106.751] Sleep (dwMilliseconds=0x3e8) [0106.753] Sleep (dwMilliseconds=0x3e8) [0106.794] Sleep (dwMilliseconds=0x3e8) [0106.799] Sleep (dwMilliseconds=0x3e8) [0106.846] Sleep (dwMilliseconds=0x3e8) [0106.849] Sleep (dwMilliseconds=0x3e8) [0106.852] Sleep (dwMilliseconds=0x3e8) [0106.856] Sleep (dwMilliseconds=0x3e8) [0106.859] Sleep (dwMilliseconds=0x3e8) [0106.867] Sleep (dwMilliseconds=0x3e8) [0106.868] Sleep (dwMilliseconds=0x3e8) [0106.870] Sleep (dwMilliseconds=0x3e8) [0106.872] Sleep (dwMilliseconds=0x3e8) [0106.874] Sleep (dwMilliseconds=0x3e8) [0106.876] Sleep (dwMilliseconds=0x3e8) [0106.878] Sleep (dwMilliseconds=0x3e8) [0106.883] Sleep (dwMilliseconds=0x3e8) [0106.885] Sleep (dwMilliseconds=0x3e8) [0106.887] Sleep (dwMilliseconds=0x3e8) [0106.888] Sleep (dwMilliseconds=0x3e8) [0106.890] Sleep (dwMilliseconds=0x3e8) [0106.892] Sleep (dwMilliseconds=0x3e8) [0106.897] Sleep (dwMilliseconds=0x3e8) [0106.898] Sleep (dwMilliseconds=0x3e8) [0106.900] Sleep (dwMilliseconds=0x3e8) [0106.902] Sleep (dwMilliseconds=0x3e8) [0106.904] Sleep (dwMilliseconds=0x3e8) [0106.906] Sleep (dwMilliseconds=0x3e8) [0106.908] Sleep (dwMilliseconds=0x3e8) [0106.910] Sleep (dwMilliseconds=0x3e8) [0106.912] Sleep (dwMilliseconds=0x3e8) [0106.914] Sleep (dwMilliseconds=0x3e8) [0106.916] Sleep (dwMilliseconds=0x3e8) [0106.919] Sleep (dwMilliseconds=0x3e8) [0106.922] Sleep (dwMilliseconds=0x3e8) [0106.924] Sleep (dwMilliseconds=0x3e8) [0106.928] Sleep (dwMilliseconds=0x3e8) [0106.931] Sleep (dwMilliseconds=0x3e8) [0106.932] Sleep (dwMilliseconds=0x3e8) [0106.934] Sleep (dwMilliseconds=0x3e8) [0106.937] Sleep (dwMilliseconds=0x3e8) [0106.939] Sleep (dwMilliseconds=0x3e8) [0106.940] Sleep (dwMilliseconds=0x3e8) [0106.942] Sleep (dwMilliseconds=0x3e8) [0106.946] Sleep (dwMilliseconds=0x3e8) [0107.077] Sleep (dwMilliseconds=0x3e8) [0107.080] Sleep (dwMilliseconds=0x3e8) [0107.081] Sleep (dwMilliseconds=0x3e8) [0107.093] Sleep (dwMilliseconds=0x3e8) [0107.097] Sleep (dwMilliseconds=0x3e8) [0107.099] Sleep (dwMilliseconds=0x3e8) [0107.101] Sleep (dwMilliseconds=0x3e8) [0107.104] Sleep (dwMilliseconds=0x3e8) [0107.111] Sleep (dwMilliseconds=0x3e8) [0107.112] Sleep (dwMilliseconds=0x3e8) [0107.114] Sleep (dwMilliseconds=0x3e8) [0107.116] Sleep (dwMilliseconds=0x3e8) [0107.118] Sleep (dwMilliseconds=0x3e8) [0107.120] Sleep (dwMilliseconds=0x3e8) [0107.123] Sleep (dwMilliseconds=0x3e8) [0107.124] Sleep (dwMilliseconds=0x3e8) [0107.126] Sleep (dwMilliseconds=0x3e8) [0107.128] Sleep (dwMilliseconds=0x3e8) [0107.131] Sleep (dwMilliseconds=0x3e8) [0107.132] Sleep (dwMilliseconds=0x3e8) [0107.134] Sleep (dwMilliseconds=0x3e8) [0108.439] Sleep (dwMilliseconds=0x3e8) [0108.442] Sleep (dwMilliseconds=0x3e8) [0108.443] Sleep (dwMilliseconds=0x3e8) [0108.445] Sleep (dwMilliseconds=0x3e8) [0108.447] Sleep (dwMilliseconds=0x3e8) [0108.453] Sleep (dwMilliseconds=0x3e8) [0108.454] Sleep (dwMilliseconds=0x3e8) [0108.456] Sleep (dwMilliseconds=0x3e8) [0108.461] Sleep (dwMilliseconds=0x3e8) [0108.463] Sleep (dwMilliseconds=0x3e8) [0108.466] Sleep (dwMilliseconds=0x3e8) [0108.467] Sleep (dwMilliseconds=0x3e8) [0108.469] Sleep (dwMilliseconds=0x3e8) [0108.471] Sleep (dwMilliseconds=0x3e8) [0108.473] Sleep (dwMilliseconds=0x3e8) [0108.475] Sleep (dwMilliseconds=0x3e8) [0108.477] Sleep (dwMilliseconds=0x3e8) [0108.479] Sleep (dwMilliseconds=0x3e8) [0108.481] Sleep (dwMilliseconds=0x3e8) [0108.484] Sleep (dwMilliseconds=0x3e8) [0108.485] Sleep (dwMilliseconds=0x3e8) [0108.487] Sleep (dwMilliseconds=0x3e8) [0108.489] Sleep (dwMilliseconds=0x3e8) [0108.491] Sleep (dwMilliseconds=0x3e8) [0108.493] Sleep (dwMilliseconds=0x3e8) [0108.495] Sleep (dwMilliseconds=0x3e8) [0108.497] Sleep (dwMilliseconds=0x3e8) [0108.499] Sleep (dwMilliseconds=0x3e8) [0108.501] Sleep (dwMilliseconds=0x3e8) [0108.504] Sleep (dwMilliseconds=0x3e8) [0108.505] Sleep (dwMilliseconds=0x3e8) [0108.507] Sleep (dwMilliseconds=0x3e8) [0108.508] Sleep (dwMilliseconds=0x3e8) [0108.510] Sleep (dwMilliseconds=0x3e8) [0108.512] Sleep (dwMilliseconds=0x3e8) [0108.514] Sleep (dwMilliseconds=0x3e8) [0108.517] Sleep (dwMilliseconds=0x3e8) [0108.519] Sleep (dwMilliseconds=0x3e8) [0108.520] Sleep (dwMilliseconds=0x3e8) [0108.522] Sleep (dwMilliseconds=0x3e8) [0108.524] Sleep (dwMilliseconds=0x3e8) [0108.526] Sleep (dwMilliseconds=0x3e8) [0108.528] Sleep (dwMilliseconds=0x3e8) [0108.531] Sleep (dwMilliseconds=0x3e8) [0108.533] Sleep (dwMilliseconds=0x3e8) [0108.535] Sleep (dwMilliseconds=0x3e8) [0108.538] Sleep (dwMilliseconds=0x3e8) [0108.539] Sleep (dwMilliseconds=0x3e8) [0108.541] Sleep (dwMilliseconds=0x3e8) [0108.543] Sleep (dwMilliseconds=0x3e8) [0108.545] Sleep (dwMilliseconds=0x3e8) [0108.548] Sleep (dwMilliseconds=0x3e8) [0108.549] Sleep (dwMilliseconds=0x3e8) [0108.551] Sleep (dwMilliseconds=0x3e8) [0108.553] Sleep (dwMilliseconds=0x3e8) [0108.555] Sleep (dwMilliseconds=0x3e8) [0108.558] Sleep (dwMilliseconds=0x3e8) [0108.559] Sleep (dwMilliseconds=0x3e8) [0108.562] Sleep (dwMilliseconds=0x3e8) [0108.564] Sleep (dwMilliseconds=0x3e8) [0108.565] Sleep (dwMilliseconds=0x3e8) [0108.685] Sleep (dwMilliseconds=0x3e8) [0108.687] Sleep (dwMilliseconds=0x3e8) [0108.689] Sleep (dwMilliseconds=0x3e8) [0108.691] Sleep (dwMilliseconds=0x3e8) [0108.693] Sleep (dwMilliseconds=0x3e8) [0108.695] Sleep (dwMilliseconds=0x3e8) [0108.697] Sleep (dwMilliseconds=0x3e8) [0108.699] Sleep (dwMilliseconds=0x3e8) [0108.700] Sleep (dwMilliseconds=0x3e8) [0108.702] Sleep (dwMilliseconds=0x3e8) [0108.704] Sleep (dwMilliseconds=0x3e8) [0108.707] Sleep (dwMilliseconds=0x3e8) [0108.708] Sleep (dwMilliseconds=0x3e8) [0108.710] Sleep (dwMilliseconds=0x3e8) [0108.712] Sleep (dwMilliseconds=0x3e8) [0108.715] Sleep (dwMilliseconds=0x3e8) [0108.716] Sleep (dwMilliseconds=0x3e8) [0108.718] Sleep (dwMilliseconds=0x3e8) [0108.732] Sleep (dwMilliseconds=0x3e8) [0108.733] Sleep (dwMilliseconds=0x3e8) [0108.735] Sleep (dwMilliseconds=0x3e8) [0108.737] Sleep (dwMilliseconds=0x3e8) [0108.739] Sleep (dwMilliseconds=0x3e8) [0108.741] Sleep (dwMilliseconds=0x3e8) [0108.744] Sleep (dwMilliseconds=0x3e8) [0108.746] Sleep (dwMilliseconds=0x3e8) [0109.306] Sleep (dwMilliseconds=0x3e8) [0109.307] Sleep (dwMilliseconds=0x3e8) [0109.309] Sleep (dwMilliseconds=0x3e8) [0109.311] Sleep (dwMilliseconds=0x3e8) [0109.315] Sleep (dwMilliseconds=0x3e8) [0109.335] Sleep (dwMilliseconds=0x3e8) [0109.336] Sleep (dwMilliseconds=0x3e8) [0109.338] Sleep (dwMilliseconds=0x3e8) [0109.340] Sleep (dwMilliseconds=0x3e8) [0109.342] Sleep (dwMilliseconds=0x3e8) [0109.344] Sleep (dwMilliseconds=0x3e8) [0109.346] Sleep (dwMilliseconds=0x3e8) [0109.348] Sleep (dwMilliseconds=0x3e8) [0109.350] Sleep (dwMilliseconds=0x3e8) [0109.352] Sleep (dwMilliseconds=0x3e8) [0109.355] Sleep (dwMilliseconds=0x3e8) [0109.368] Sleep (dwMilliseconds=0x3e8) [0109.369] Sleep (dwMilliseconds=0x3e8) [0109.371] Sleep (dwMilliseconds=0x3e8) [0109.373] Sleep (dwMilliseconds=0x3e8) [0109.375] Sleep (dwMilliseconds=0x3e8) [0109.378] Sleep (dwMilliseconds=0x3e8) [0109.379] Sleep (dwMilliseconds=0x3e8) [0109.880] Sleep (dwMilliseconds=0x3e8) [0109.881] Sleep (dwMilliseconds=0x3e8) [0109.885] Sleep (dwMilliseconds=0x3e8) [0109.887] Sleep (dwMilliseconds=0x3e8) [0109.889] Sleep (dwMilliseconds=0x3e8) [0109.896] Sleep (dwMilliseconds=0x3e8) [0109.898] Sleep (dwMilliseconds=0x3e8) [0109.900] Sleep (dwMilliseconds=0x3e8) [0109.902] Sleep (dwMilliseconds=0x3e8) [0109.904] Sleep (dwMilliseconds=0x3e8) [0109.906] Sleep (dwMilliseconds=0x3e8) [0109.908] Sleep (dwMilliseconds=0x3e8) [0109.910] Sleep (dwMilliseconds=0x3e8) [0109.912] Sleep (dwMilliseconds=0x3e8) [0109.914] Sleep (dwMilliseconds=0x3e8) [0109.917] Sleep (dwMilliseconds=0x3e8) [0109.918] Sleep (dwMilliseconds=0x3e8) [0109.920] Sleep (dwMilliseconds=0x3e8) [0109.922] Sleep (dwMilliseconds=0x3e8) [0109.924] Sleep (dwMilliseconds=0x3e8) [0109.927] Sleep (dwMilliseconds=0x3e8) [0109.928] Sleep (dwMilliseconds=0x3e8) [0109.932] Sleep (dwMilliseconds=0x3e8) [0109.933] Sleep (dwMilliseconds=0x3e8) [0109.935] Sleep (dwMilliseconds=0x3e8) [0110.299] Sleep (dwMilliseconds=0x3e8) [0110.301] Sleep (dwMilliseconds=0x3e8) [0110.303] Sleep (dwMilliseconds=0x3e8) [0110.306] Sleep (dwMilliseconds=0x3e8) [0110.308] Sleep (dwMilliseconds=0x3e8) [0110.311] Sleep (dwMilliseconds=0x3e8) [0110.312] Sleep (dwMilliseconds=0x3e8) [0110.314] Sleep (dwMilliseconds=0x3e8) [0110.316] Sleep (dwMilliseconds=0x3e8) [0110.318] Sleep (dwMilliseconds=0x3e8) [0110.321] Sleep (dwMilliseconds=0x3e8) [0110.322] Sleep (dwMilliseconds=0x3e8) [0110.324] Sleep (dwMilliseconds=0x3e8) [0110.326] Sleep (dwMilliseconds=0x3e8) [0110.329] Sleep (dwMilliseconds=0x3e8) [0110.330] Sleep (dwMilliseconds=0x3e8) [0110.333] Sleep (dwMilliseconds=0x3e8) [0110.335] Sleep (dwMilliseconds=0x3e8) [0110.338] Sleep (dwMilliseconds=0x3e8) [0110.340] Sleep (dwMilliseconds=0x3e8) [0110.342] Sleep (dwMilliseconds=0x3e8) [0110.921] Sleep (dwMilliseconds=0x3e8) [0110.922] Sleep (dwMilliseconds=0x3e8) [0110.924] Sleep (dwMilliseconds=0x3e8) [0110.926] Sleep (dwMilliseconds=0x3e8) [0110.928] Sleep (dwMilliseconds=0x3e8) [0110.931] Sleep (dwMilliseconds=0x3e8) [0110.944] Sleep (dwMilliseconds=0x3e8) [0111.196] Sleep (dwMilliseconds=0x3e8) [0111.198] Sleep (dwMilliseconds=0x3e8) [0111.200] Sleep (dwMilliseconds=0x3e8) [0111.202] Sleep (dwMilliseconds=0x3e8) [0111.205] Sleep (dwMilliseconds=0x3e8) [0111.207] Sleep (dwMilliseconds=0x3e8) [0111.209] Sleep (dwMilliseconds=0x3e8) [0111.211] Sleep (dwMilliseconds=0x3e8) [0111.213] Sleep (dwMilliseconds=0x3e8) [0111.215] Sleep (dwMilliseconds=0x3e8) [0112.315] Sleep (dwMilliseconds=0x3e8) [0112.317] Sleep (dwMilliseconds=0x3e8) [0112.319] Sleep (dwMilliseconds=0x3e8) [0112.323] Sleep (dwMilliseconds=0x3e8) [0112.325] Sleep (dwMilliseconds=0x3e8) [0112.327] Sleep (dwMilliseconds=0x3e8) [0112.329] Sleep (dwMilliseconds=0x3e8) [0112.331] Sleep (dwMilliseconds=0x3e8) [0112.333] Sleep (dwMilliseconds=0x3e8) [0112.335] Sleep (dwMilliseconds=0x3e8) [0112.337] Sleep (dwMilliseconds=0x3e8) [0112.339] Sleep (dwMilliseconds=0x3e8) [0112.341] Sleep (dwMilliseconds=0x3e8) [0112.343] Sleep (dwMilliseconds=0x3e8) [0112.345] Sleep (dwMilliseconds=0x3e8) [0112.347] Sleep (dwMilliseconds=0x3e8) [0112.349] Sleep (dwMilliseconds=0x3e8) [0112.351] Sleep (dwMilliseconds=0x3e8) [0112.354] Sleep (dwMilliseconds=0x3e8) [0112.356] Sleep (dwMilliseconds=0x3e8) [0112.357] Sleep (dwMilliseconds=0x3e8) [0112.359] Sleep (dwMilliseconds=0x3e8) [0112.362] Sleep (dwMilliseconds=0x3e8) [0112.523] Sleep (dwMilliseconds=0x3e8) [0112.525] Sleep (dwMilliseconds=0x3e8) [0112.527] Sleep (dwMilliseconds=0x3e8) [0112.529] Sleep (dwMilliseconds=0x3e8) [0112.531] Sleep (dwMilliseconds=0x3e8) [0112.533] Sleep (dwMilliseconds=0x3e8) [0112.535] Sleep (dwMilliseconds=0x3e8) [0112.537] Sleep (dwMilliseconds=0x3e8) [0112.539] Sleep (dwMilliseconds=0x3e8) [0112.540] Sleep (dwMilliseconds=0x3e8) [0112.542] Sleep (dwMilliseconds=0x3e8) [0112.544] Sleep (dwMilliseconds=0x3e8) [0112.546] Sleep (dwMilliseconds=0x3e8) [0112.549] Sleep (dwMilliseconds=0x3e8) [0112.552] Sleep (dwMilliseconds=0x3e8) [0112.555] Sleep (dwMilliseconds=0x3e8) [0112.556] Sleep (dwMilliseconds=0x3e8) [0112.558] Sleep (dwMilliseconds=0x3e8) [0112.798] Sleep (dwMilliseconds=0x3e8) [0112.799] Sleep (dwMilliseconds=0x3e8) [0112.801] Sleep (dwMilliseconds=0x3e8) [0112.803] Sleep (dwMilliseconds=0x3e8) [0112.805] Sleep (dwMilliseconds=0x3e8) [0112.807] Sleep (dwMilliseconds=0x3e8) [0112.809] Sleep (dwMilliseconds=0x3e8) [0112.811] Sleep (dwMilliseconds=0x3e8) [0112.812] Sleep (dwMilliseconds=0x3e8) [0112.814] Sleep (dwMilliseconds=0x3e8) [0112.816] Sleep (dwMilliseconds=0x3e8) [0112.822] Sleep (dwMilliseconds=0x3e8) [0112.824] Sleep (dwMilliseconds=0x3e8) [0112.826] Sleep (dwMilliseconds=0x3e8) [0112.829] Sleep (dwMilliseconds=0x3e8) [0112.830] Sleep (dwMilliseconds=0x3e8) [0112.833] Sleep (dwMilliseconds=0x3e8) [0112.834] Sleep (dwMilliseconds=0x3e8) [0112.837] Sleep (dwMilliseconds=0x3e8) [0112.840] Sleep (dwMilliseconds=0x3e8) [0112.841] Sleep (dwMilliseconds=0x3e8) [0112.843] Sleep (dwMilliseconds=0x3e8) [0112.845] Sleep (dwMilliseconds=0x3e8) [0112.847] Sleep (dwMilliseconds=0x3e8) [0112.851] Sleep (dwMilliseconds=0x3e8) [0112.852] Sleep (dwMilliseconds=0x3e8) [0112.854] Sleep (dwMilliseconds=0x3e8) [0112.856] Sleep (dwMilliseconds=0x3e8) [0112.858] Sleep (dwMilliseconds=0x3e8) [0112.860] Sleep (dwMilliseconds=0x3e8) [0112.862] Sleep (dwMilliseconds=0x3e8) [0112.864] Sleep (dwMilliseconds=0x3e8) [0112.866] Sleep (dwMilliseconds=0x3e8) [0112.867] Sleep (dwMilliseconds=0x3e8) [0112.870] Sleep (dwMilliseconds=0x3e8) [0112.872] Sleep (dwMilliseconds=0x3e8) [0112.874] Sleep (dwMilliseconds=0x3e8) [0112.878] Sleep (dwMilliseconds=0x3e8) [0112.879] Sleep (dwMilliseconds=0x3e8) [0112.882] Sleep (dwMilliseconds=0x3e8) [0112.887] Sleep (dwMilliseconds=0x3e8) [0112.890] Sleep (dwMilliseconds=0x3e8) [0112.894] Sleep (dwMilliseconds=0x3e8) [0112.896] Sleep (dwMilliseconds=0x3e8) [0112.898] Sleep (dwMilliseconds=0x3e8) [0112.901] Sleep (dwMilliseconds=0x3e8) [0112.903] Sleep (dwMilliseconds=0x3e8) [0112.904] Sleep (dwMilliseconds=0x3e8) [0112.906] Sleep (dwMilliseconds=0x3e8) [0112.909] Sleep (dwMilliseconds=0x3e8) [0112.923] Sleep (dwMilliseconds=0x3e8) [0112.924] Sleep (dwMilliseconds=0x3e8) [0112.926] Sleep (dwMilliseconds=0x3e8) [0112.928] Sleep (dwMilliseconds=0x3e8) [0112.930] Sleep (dwMilliseconds=0x3e8) [0112.933] Sleep (dwMilliseconds=0x3e8) [0112.936] Sleep (dwMilliseconds=0x3e8) [0112.967] Sleep (dwMilliseconds=0x3e8) [0112.970] Sleep (dwMilliseconds=0x3e8) [0112.972] Sleep (dwMilliseconds=0x3e8) [0112.973] Sleep (dwMilliseconds=0x3e8) [0112.975] Sleep (dwMilliseconds=0x3e8) [0112.977] Sleep (dwMilliseconds=0x3e8) [0113.083] Sleep (dwMilliseconds=0x3e8) [0113.090] Sleep (dwMilliseconds=0x3e8) [0113.092] Sleep (dwMilliseconds=0x3e8) [0113.095] Sleep (dwMilliseconds=0x3e8) [0113.096] Sleep (dwMilliseconds=0x3e8) [0113.098] Sleep (dwMilliseconds=0x3e8) [0113.100] Sleep (dwMilliseconds=0x3e8) [0113.102] Sleep (dwMilliseconds=0x3e8) [0113.104] Sleep (dwMilliseconds=0x3e8) [0113.106] Sleep (dwMilliseconds=0x3e8) [0113.109] Sleep (dwMilliseconds=0x3e8) [0113.110] Sleep (dwMilliseconds=0x3e8) [0113.113] Sleep (dwMilliseconds=0x3e8) [0113.114] Sleep (dwMilliseconds=0x3e8) [0113.120] Sleep (dwMilliseconds=0x3e8) [0113.122] Sleep (dwMilliseconds=0x3e8) [0113.124] Sleep (dwMilliseconds=0x3e8) [0113.127] Sleep (dwMilliseconds=0x3e8) [0113.128] Sleep (dwMilliseconds=0x3e8) [0113.130] Sleep (dwMilliseconds=0x3e8) [0113.132] Sleep (dwMilliseconds=0x3e8) [0113.134] Sleep (dwMilliseconds=0x3e8) [0113.136] Sleep (dwMilliseconds=0x3e8) [0113.138] Sleep (dwMilliseconds=0x3e8) [0113.140] Sleep (dwMilliseconds=0x3e8) [0113.142] Sleep (dwMilliseconds=0x3e8) [0113.144] Sleep (dwMilliseconds=0x3e8) [0113.147] Sleep (dwMilliseconds=0x3e8) [0113.150] Sleep (dwMilliseconds=0x3e8) [0113.151] Sleep (dwMilliseconds=0x3e8) [0113.153] Sleep (dwMilliseconds=0x3e8) [0113.156] Sleep (dwMilliseconds=0x3e8) [0113.157] Sleep (dwMilliseconds=0x3e8) [0113.160] Sleep (dwMilliseconds=0x3e8) [0113.161] Sleep (dwMilliseconds=0x3e8) [0113.164] Sleep (dwMilliseconds=0x3e8) [0113.165] Sleep (dwMilliseconds=0x3e8) [0113.167] Sleep (dwMilliseconds=0x3e8) [0113.170] Sleep (dwMilliseconds=0x3e8) [0113.172] Sleep (dwMilliseconds=0x3e8) [0113.173] Sleep (dwMilliseconds=0x3e8) [0113.176] Sleep (dwMilliseconds=0x3e8) [0113.177] Sleep (dwMilliseconds=0x3e8) [0113.179] Sleep (dwMilliseconds=0x3e8) [0113.181] Sleep (dwMilliseconds=0x3e8) [0113.184] Sleep (dwMilliseconds=0x3e8) [0113.186] Sleep (dwMilliseconds=0x3e8) [0113.187] Sleep (dwMilliseconds=0x3e8) [0113.189] Sleep (dwMilliseconds=0x3e8) [0113.191] Sleep (dwMilliseconds=0x3e8) [0113.193] Sleep (dwMilliseconds=0x3e8) [0113.195] Sleep (dwMilliseconds=0x3e8) [0113.198] Sleep (dwMilliseconds=0x3e8) [0113.199] Sleep (dwMilliseconds=0x3e8) [0113.201] Sleep (dwMilliseconds=0x3e8) [0113.203] Sleep (dwMilliseconds=0x3e8) [0113.205] Sleep (dwMilliseconds=0x3e8) [0113.207] Sleep (dwMilliseconds=0x3e8) [0113.209] Sleep (dwMilliseconds=0x3e8) [0113.211] Sleep (dwMilliseconds=0x3e8) [0113.213] Sleep (dwMilliseconds=0x3e8) [0113.215] Sleep (dwMilliseconds=0x3e8) [0113.217] Sleep (dwMilliseconds=0x3e8) [0113.219] Sleep (dwMilliseconds=0x3e8) [0113.222] Sleep (dwMilliseconds=0x3e8) [0113.224] Sleep (dwMilliseconds=0x3e8) [0113.226] Sleep (dwMilliseconds=0x3e8) [0113.228] Sleep (dwMilliseconds=0x3e8) [0113.230] Sleep (dwMilliseconds=0x3e8) [0113.231] Sleep (dwMilliseconds=0x3e8) [0113.233] Sleep (dwMilliseconds=0x3e8) [0113.237] Sleep (dwMilliseconds=0x3e8) [0113.238] Sleep (dwMilliseconds=0x3e8) [0113.240] Sleep (dwMilliseconds=0x3e8) [0113.242] Sleep (dwMilliseconds=0x3e8) [0113.245] Sleep (dwMilliseconds=0x3e8) [0113.262] Sleep (dwMilliseconds=0x3e8) [0113.263] Sleep (dwMilliseconds=0x3e8) [0113.265] Sleep (dwMilliseconds=0x3e8) [0113.268] Sleep (dwMilliseconds=0x3e8) [0113.269] Sleep (dwMilliseconds=0x3e8) [0113.272] Sleep (dwMilliseconds=0x3e8) [0113.274] Sleep (dwMilliseconds=0x3e8) [0113.275] Sleep (dwMilliseconds=0x3e8) [0113.279] Sleep (dwMilliseconds=0x3e8) [0113.280] Sleep (dwMilliseconds=0x3e8) [0113.283] Sleep (dwMilliseconds=0x3e8) [0113.284] Sleep (dwMilliseconds=0x3e8) [0113.286] Sleep (dwMilliseconds=0x3e8) [0113.288] Sleep (dwMilliseconds=0x3e8) [0113.290] Sleep (dwMilliseconds=0x3e8) [0113.292] Sleep (dwMilliseconds=0x3e8) [0113.296] Sleep (dwMilliseconds=0x3e8) [0113.305] Sleep (dwMilliseconds=0x3e8) [0113.306] Sleep (dwMilliseconds=0x3e8) [0113.308] Sleep (dwMilliseconds=0x3e8) [0113.310] Sleep (dwMilliseconds=0x3e8) [0113.313] Sleep (dwMilliseconds=0x3e8) [0113.314] Sleep (dwMilliseconds=0x3e8) [0113.316] Sleep (dwMilliseconds=0x3e8) [0113.320] Sleep (dwMilliseconds=0x3e8) [0113.334] Sleep (dwMilliseconds=0x3e8) [0113.337] Sleep (dwMilliseconds=0x3e8) [0113.338] Sleep (dwMilliseconds=0x3e8) [0113.341] Sleep (dwMilliseconds=0x3e8) [0113.342] Sleep (dwMilliseconds=0x3e8) [0113.344] Sleep (dwMilliseconds=0x3e8) [0113.346] Sleep (dwMilliseconds=0x3e8) [0113.348] Sleep (dwMilliseconds=0x3e8) [0113.351] Sleep (dwMilliseconds=0x3e8) [0113.352] Sleep (dwMilliseconds=0x3e8) [0113.355] Sleep (dwMilliseconds=0x3e8) [0113.360] Sleep (dwMilliseconds=0x3e8) [0113.361] Sleep (dwMilliseconds=0x3e8) [0113.363] Sleep (dwMilliseconds=0x3e8) [0113.365] Sleep (dwMilliseconds=0x3e8) [0113.368] Sleep (dwMilliseconds=0x3e8) [0113.369] Sleep (dwMilliseconds=0x3e8) [0113.371] Sleep (dwMilliseconds=0x3e8) [0113.372] Sleep (dwMilliseconds=0x3e8) [0113.375] Sleep (dwMilliseconds=0x3e8) [0113.378] Sleep (dwMilliseconds=0x3e8) [0113.379] Sleep (dwMilliseconds=0x3e8) [0113.381] Sleep (dwMilliseconds=0x3e8) [0113.383] Sleep (dwMilliseconds=0x3e8) [0113.385] Sleep (dwMilliseconds=0x3e8) [0113.387] Sleep (dwMilliseconds=0x3e8) [0113.388] Sleep (dwMilliseconds=0x3e8) [0113.390] Sleep (dwMilliseconds=0x3e8) [0113.392] Sleep (dwMilliseconds=0x3e8) [0113.393] Sleep (dwMilliseconds=0x3e8) [0113.395] Sleep (dwMilliseconds=0x3e8) [0113.398] Sleep (dwMilliseconds=0x3e8) [0113.428] Sleep (dwMilliseconds=0x3e8) [0113.429] Sleep (dwMilliseconds=0x3e8) [0113.431] Sleep (dwMilliseconds=0x3e8) [0113.434] Sleep (dwMilliseconds=0x3e8) [0113.435] Sleep (dwMilliseconds=0x3e8) [0113.437] Sleep (dwMilliseconds=0x3e8) [0113.439] Sleep (dwMilliseconds=0x3e8) [0113.442] Sleep (dwMilliseconds=0x3e8) [0113.443] Sleep (dwMilliseconds=0x3e8) [0113.445] Sleep (dwMilliseconds=0x3e8) [0113.447] Sleep (dwMilliseconds=0x3e8) [0113.915] Sleep (dwMilliseconds=0x3e8) [0113.921] Sleep (dwMilliseconds=0x3e8) [0113.922] Sleep (dwMilliseconds=0x3e8) [0113.924] Sleep (dwMilliseconds=0x3e8) [0113.926] Sleep (dwMilliseconds=0x3e8) [0113.928] Sleep (dwMilliseconds=0x3e8) [0113.930] Sleep (dwMilliseconds=0x3e8) [0113.932] Sleep (dwMilliseconds=0x3e8) [0113.934] Sleep (dwMilliseconds=0x3e8) [0113.937] Sleep (dwMilliseconds=0x3e8) [0113.939] Sleep (dwMilliseconds=0x3e8) [0113.941] Sleep (dwMilliseconds=0x3e8) [0113.971] Sleep (dwMilliseconds=0x3e8) [0114.007] Sleep (dwMilliseconds=0x3e8) [0114.041] Sleep (dwMilliseconds=0x3e8) [0114.046] Sleep (dwMilliseconds=0x3e8) [0114.079] Sleep (dwMilliseconds=0x3e8) [0114.118] Sleep (dwMilliseconds=0x3e8) [0114.127] Sleep (dwMilliseconds=0x3e8) [0114.129] Sleep (dwMilliseconds=0x3e8) [0114.131] Sleep (dwMilliseconds=0x3e8) [0114.133] Sleep (dwMilliseconds=0x3e8) [0114.135] Sleep (dwMilliseconds=0x3e8) [0114.137] Sleep (dwMilliseconds=0x3e8) [0114.140] Sleep (dwMilliseconds=0x3e8) [0114.142] Sleep (dwMilliseconds=0x3e8) [0114.144] Sleep (dwMilliseconds=0x3e8) [0114.145] Sleep (dwMilliseconds=0x3e8) [0114.147] Sleep (dwMilliseconds=0x3e8) [0114.149] Sleep (dwMilliseconds=0x3e8) [0114.150] Sleep (dwMilliseconds=0x3e8) [0114.152] Sleep (dwMilliseconds=0x3e8) [0114.154] Sleep (dwMilliseconds=0x3e8) [0114.156] Sleep (dwMilliseconds=0x3e8) [0114.159] Sleep (dwMilliseconds=0x3e8) [0114.162] Sleep (dwMilliseconds=0x3e8) [0114.164] Sleep (dwMilliseconds=0x3e8) [0114.166] Sleep (dwMilliseconds=0x3e8) [0114.168] Sleep (dwMilliseconds=0x3e8) [0114.170] Sleep (dwMilliseconds=0x3e8) [0114.172] Sleep (dwMilliseconds=0x3e8) [0114.175] Sleep (dwMilliseconds=0x3e8) [0114.176] Sleep (dwMilliseconds=0x3e8) [0114.179] Sleep (dwMilliseconds=0x3e8) [0114.180] Sleep (dwMilliseconds=0x3e8) [0114.183] Sleep (dwMilliseconds=0x3e8) [0114.185] Sleep (dwMilliseconds=0x3e8) [0114.186] Sleep (dwMilliseconds=0x3e8) [0114.188] Sleep (dwMilliseconds=0x3e8) [0114.190] Sleep (dwMilliseconds=0x3e8) [0114.193] Sleep (dwMilliseconds=0x3e8) [0114.194] Sleep (dwMilliseconds=0x3e8) [0114.196] Sleep (dwMilliseconds=0x3e8) [0114.199] Sleep (dwMilliseconds=0x3e8) [0114.201] Sleep (dwMilliseconds=0x3e8) [0114.204] Sleep (dwMilliseconds=0x3e8) [0114.205] Sleep (dwMilliseconds=0x3e8) [0114.207] Sleep (dwMilliseconds=0x3e8) [0114.209] Sleep (dwMilliseconds=0x3e8) [0114.211] Sleep (dwMilliseconds=0x3e8) [0114.214] Sleep (dwMilliseconds=0x3e8) [0114.216] Sleep (dwMilliseconds=0x3e8) [0114.218] Sleep (dwMilliseconds=0x3e8) [0114.220] Sleep (dwMilliseconds=0x3e8) [0114.224] Sleep (dwMilliseconds=0x3e8) [0114.225] Sleep (dwMilliseconds=0x3e8) [0114.227] Sleep (dwMilliseconds=0x3e8) [0114.550] Sleep (dwMilliseconds=0x3e8) [0114.551] Sleep (dwMilliseconds=0x3e8) [0114.554] Sleep (dwMilliseconds=0x3e8) [0114.558] Sleep (dwMilliseconds=0x3e8) [0114.561] Sleep (dwMilliseconds=0x3e8) [0114.564] Sleep (dwMilliseconds=0x3e8) [0114.580] Sleep (dwMilliseconds=0x3e8) [0114.581] Sleep (dwMilliseconds=0x3e8) [0114.584] Sleep (dwMilliseconds=0x3e8) [0114.585] Sleep (dwMilliseconds=0x3e8) [0114.587] Sleep (dwMilliseconds=0x3e8) [0114.589] Sleep (dwMilliseconds=0x3e8) [0114.591] Sleep (dwMilliseconds=0x3e8) [0114.593] Sleep (dwMilliseconds=0x3e8) [0114.596] Sleep (dwMilliseconds=0x3e8) [0114.597] Sleep (dwMilliseconds=0x3e8) [0114.599] Sleep (dwMilliseconds=0x3e8) [0114.601] Sleep (dwMilliseconds=0x3e8) [0114.603] Sleep (dwMilliseconds=0x3e8) [0114.605] Sleep (dwMilliseconds=0x3e8) [0114.607] Sleep (dwMilliseconds=0x3e8) [0114.609] Sleep (dwMilliseconds=0x3e8) [0114.611] Sleep (dwMilliseconds=0x3e8) [0114.613] Sleep (dwMilliseconds=0x3e8) [0114.615] Sleep (dwMilliseconds=0x3e8) [0114.617] Sleep (dwMilliseconds=0x3e8) [0114.619] Sleep (dwMilliseconds=0x3e8) [0114.621] Sleep (dwMilliseconds=0x3e8) [0114.623] Sleep (dwMilliseconds=0x3e8) [0114.639] Sleep (dwMilliseconds=0x3e8) [0114.643] Sleep (dwMilliseconds=0x3e8) [0114.648] Sleep (dwMilliseconds=0x3e8) [0114.650] Sleep (dwMilliseconds=0x3e8) [0114.653] Sleep (dwMilliseconds=0x3e8) [0114.655] Sleep (dwMilliseconds=0x3e8) [0114.658] Sleep (dwMilliseconds=0x3e8) [0114.660] Sleep (dwMilliseconds=0x3e8) [0114.661] Sleep (dwMilliseconds=0x3e8) [0114.663] Sleep (dwMilliseconds=0x3e8) [0114.665] Sleep (dwMilliseconds=0x3e8) [0114.667] Sleep (dwMilliseconds=0x3e8) [0114.669] Sleep (dwMilliseconds=0x3e8) [0114.671] Sleep (dwMilliseconds=0x3e8) [0114.672] Sleep (dwMilliseconds=0x3e8) [0114.674] Sleep (dwMilliseconds=0x3e8) [0114.676] Sleep (dwMilliseconds=0x3e8) [0114.678] Sleep (dwMilliseconds=0x3e8) [0114.680] Sleep (dwMilliseconds=0x3e8) [0114.683] Sleep (dwMilliseconds=0x3e8) [0114.684] Sleep (dwMilliseconds=0x3e8) [0114.826] Sleep (dwMilliseconds=0x3e8) [0114.827] Sleep (dwMilliseconds=0x3e8) [0114.829] Sleep (dwMilliseconds=0x3e8) [0114.832] Sleep (dwMilliseconds=0x3e8) [0114.833] Sleep (dwMilliseconds=0x3e8) [0114.835] Sleep (dwMilliseconds=0x3e8) [0114.838] Sleep (dwMilliseconds=0x3e8) [0114.839] Sleep (dwMilliseconds=0x3e8) [0114.842] Sleep (dwMilliseconds=0x3e8) [0114.844] Sleep (dwMilliseconds=0x3e8) [0114.846] Sleep (dwMilliseconds=0x3e8) [0114.848] Sleep (dwMilliseconds=0x3e8) [0114.851] Sleep (dwMilliseconds=0x3e8) [0114.852] Sleep (dwMilliseconds=0x3e8) [0114.854] Sleep (dwMilliseconds=0x3e8) [0114.857] Sleep (dwMilliseconds=0x3e8) [0114.858] Sleep (dwMilliseconds=0x3e8) [0114.860] Sleep (dwMilliseconds=0x3e8) [0114.863] Sleep (dwMilliseconds=0x3e8) [0114.864] Sleep (dwMilliseconds=0x3e8) [0114.866] Sleep (dwMilliseconds=0x3e8) [0114.868] Sleep (dwMilliseconds=0x3e8) [0114.870] Sleep (dwMilliseconds=0x3e8) [0115.171] Sleep (dwMilliseconds=0x3e8) [0115.173] Sleep (dwMilliseconds=0x3e8) [0115.175] Sleep (dwMilliseconds=0x3e8) [0115.177] Sleep (dwMilliseconds=0x3e8) [0115.178] Sleep (dwMilliseconds=0x3e8) [0115.180] Sleep (dwMilliseconds=0x3e8) [0115.223] Sleep (dwMilliseconds=0x3e8) [0115.225] Sleep (dwMilliseconds=0x3e8) [0115.227] Sleep (dwMilliseconds=0x3e8) [0115.229] Sleep (dwMilliseconds=0x3e8) [0115.231] Sleep (dwMilliseconds=0x3e8) [0115.233] Sleep (dwMilliseconds=0x3e8) [0115.239] Sleep (dwMilliseconds=0x3e8) [0115.253] Sleep (dwMilliseconds=0x3e8) [0115.254] Sleep (dwMilliseconds=0x3e8) [0115.256] Sleep (dwMilliseconds=0x3e8) [0115.258] Sleep (dwMilliseconds=0x3e8) [0115.260] Sleep (dwMilliseconds=0x3e8) [0115.263] Sleep (dwMilliseconds=0x3e8) [0115.264] Sleep (dwMilliseconds=0x3e8) [0115.266] Sleep (dwMilliseconds=0x3e8) [0115.268] Sleep (dwMilliseconds=0x3e8) [0115.270] Sleep (dwMilliseconds=0x3e8) [0115.272] Sleep (dwMilliseconds=0x3e8) [0115.275] Sleep (dwMilliseconds=0x3e8) [0115.278] Sleep (dwMilliseconds=0x3e8) [0115.279] Sleep (dwMilliseconds=0x3e8) [0115.281] Sleep (dwMilliseconds=0x3e8) [0115.283] Sleep (dwMilliseconds=0x3e8) [0115.285] Sleep (dwMilliseconds=0x3e8) [0115.287] Sleep (dwMilliseconds=0x3e8) [0115.289] Sleep (dwMilliseconds=0x3e8) [0115.292] Sleep (dwMilliseconds=0x3e8) [0115.293] Sleep (dwMilliseconds=0x3e8) [0115.296] Sleep (dwMilliseconds=0x3e8) [0115.298] Sleep (dwMilliseconds=0x3e8) [0115.300] Sleep (dwMilliseconds=0x3e8) [0115.302] Sleep (dwMilliseconds=0x3e8) [0115.304] Sleep (dwMilliseconds=0x3e8) [0115.306] Sleep (dwMilliseconds=0x3e8) [0115.308] Sleep (dwMilliseconds=0x3e8) [0115.310] Sleep (dwMilliseconds=0x3e8) [0115.312] Sleep (dwMilliseconds=0x3e8) [0115.315] Sleep (dwMilliseconds=0x3e8) [0115.316] Sleep (dwMilliseconds=0x3e8) [0115.318] Sleep (dwMilliseconds=0x3e8) [0115.320] Sleep (dwMilliseconds=0x3e8) [0115.323] Sleep (dwMilliseconds=0x3e8) [0115.324] Sleep (dwMilliseconds=0x3e8) [0115.327] Sleep (dwMilliseconds=0x3e8) [0115.329] Sleep (dwMilliseconds=0x3e8) [0115.330] Sleep (dwMilliseconds=0x3e8) [0115.332] Sleep (dwMilliseconds=0x3e8) [0115.334] Sleep (dwMilliseconds=0x3e8) [0115.336] Sleep (dwMilliseconds=0x3e8) [0115.338] Sleep (dwMilliseconds=0x3e8) [0115.340] Sleep (dwMilliseconds=0x3e8) [0115.342] Sleep (dwMilliseconds=0x3e8) [0115.344] Sleep (dwMilliseconds=0x3e8) [0115.346] Sleep (dwMilliseconds=0x3e8) [0115.348] Sleep (dwMilliseconds=0x3e8) [0115.350] Sleep (dwMilliseconds=0x3e8) [0115.353] Sleep (dwMilliseconds=0x3e8) [0115.356] Sleep (dwMilliseconds=0x3e8) [0115.364] Sleep (dwMilliseconds=0x3e8) [0115.366] Sleep (dwMilliseconds=0x3e8) [0115.436] Sleep (dwMilliseconds=0x3e8) [0115.437] Sleep (dwMilliseconds=0x3e8) [0115.439] Sleep (dwMilliseconds=0x3e8) [0115.441] Sleep (dwMilliseconds=0x3e8) [0115.443] Sleep (dwMilliseconds=0x3e8) [0115.445] Sleep (dwMilliseconds=0x3e8) [0115.447] Sleep (dwMilliseconds=0x3e8) [0115.449] Sleep (dwMilliseconds=0x3e8) [0115.451] Sleep (dwMilliseconds=0x3e8) [0115.453] Sleep (dwMilliseconds=0x3e8) [0115.455] Sleep (dwMilliseconds=0x3e8) [0115.457] Sleep (dwMilliseconds=0x3e8) [0115.459] Sleep (dwMilliseconds=0x3e8) [0115.461] Sleep (dwMilliseconds=0x3e8) [0115.463] Sleep (dwMilliseconds=0x3e8) [0115.465] Sleep (dwMilliseconds=0x3e8) [0115.467] Sleep (dwMilliseconds=0x3e8) [0115.469] Sleep (dwMilliseconds=0x3e8) [0115.474] Sleep (dwMilliseconds=0x3e8) [0115.476] Sleep (dwMilliseconds=0x3e8) [0115.479] Sleep (dwMilliseconds=0x3e8) [0115.480] Sleep (dwMilliseconds=0x3e8) [0115.483] Sleep (dwMilliseconds=0x3e8) [0115.485] Sleep (dwMilliseconds=0x3e8) [0115.486] Sleep (dwMilliseconds=0x3e8) [0115.488] Sleep (dwMilliseconds=0x3e8) [0115.664] Sleep (dwMilliseconds=0x3e8) [0115.666] Sleep (dwMilliseconds=0x3e8) [0115.668] Sleep (dwMilliseconds=0x3e8) [0115.670] Sleep (dwMilliseconds=0x3e8) [0115.673] Sleep (dwMilliseconds=0x3e8) [0115.674] Sleep (dwMilliseconds=0x3e8) [0115.678] Sleep (dwMilliseconds=0x3e8) [0115.679] Sleep (dwMilliseconds=0x3e8) [0115.681] Sleep (dwMilliseconds=0x3e8) [0115.683] Sleep (dwMilliseconds=0x3e8) [0115.685] Sleep (dwMilliseconds=0x3e8) [0115.687] Sleep (dwMilliseconds=0x3e8) [0115.689] Sleep (dwMilliseconds=0x3e8) [0115.730] Sleep (dwMilliseconds=0x3e8) [0115.731] Sleep (dwMilliseconds=0x3e8) [0115.733] Sleep (dwMilliseconds=0x3e8) [0115.735] Sleep (dwMilliseconds=0x3e8) [0115.737] Sleep (dwMilliseconds=0x3e8) [0115.739] Sleep (dwMilliseconds=0x3e8) [0115.741] Sleep (dwMilliseconds=0x3e8) [0115.743] Sleep (dwMilliseconds=0x3e8) [0115.745] Sleep (dwMilliseconds=0x3e8) [0115.747] Sleep (dwMilliseconds=0x3e8) [0115.749] Sleep (dwMilliseconds=0x3e8) [0115.751] Sleep (dwMilliseconds=0x3e8) [0115.753] Sleep (dwMilliseconds=0x3e8) [0115.755] Sleep (dwMilliseconds=0x3e8) [0115.757] Sleep (dwMilliseconds=0x3e8) [0115.878] Sleep (dwMilliseconds=0x3e8) [0115.879] Sleep (dwMilliseconds=0x3e8) [0115.881] Sleep (dwMilliseconds=0x3e8) [0115.927] Sleep (dwMilliseconds=0x3e8) [0115.930] Sleep (dwMilliseconds=0x3e8) [0115.932] Sleep (dwMilliseconds=0x3e8) [0115.933] Sleep (dwMilliseconds=0x3e8) [0115.935] Sleep (dwMilliseconds=0x3e8) [0115.937] Sleep (dwMilliseconds=0x3e8) [0115.939] Sleep (dwMilliseconds=0x3e8) [0115.941] Sleep (dwMilliseconds=0x3e8) [0115.943] Sleep (dwMilliseconds=0x3e8) [0115.945] Sleep (dwMilliseconds=0x3e8) [0115.947] Sleep (dwMilliseconds=0x3e8) [0115.949] Sleep (dwMilliseconds=0x3e8) [0115.987] Sleep (dwMilliseconds=0x3e8) [0115.988] Sleep (dwMilliseconds=0x3e8) [0115.990] Sleep (dwMilliseconds=0x3e8) [0115.992] Sleep (dwMilliseconds=0x3e8) [0115.996] Sleep (dwMilliseconds=0x3e8) [0115.997] Sleep (dwMilliseconds=0x3e8) [0115.999] Sleep (dwMilliseconds=0x3e8) [0116.002] Sleep (dwMilliseconds=0x3e8) [0116.003] Sleep (dwMilliseconds=0x3e8) [0116.150] Sleep (dwMilliseconds=0x3e8) [0116.153] Sleep (dwMilliseconds=0x3e8) [0116.158] Sleep (dwMilliseconds=0x3e8) [0116.159] Sleep (dwMilliseconds=0x3e8) [0116.161] Sleep (dwMilliseconds=0x3e8) [0116.163] Sleep (dwMilliseconds=0x3e8) [0116.165] Sleep (dwMilliseconds=0x3e8) [0116.167] Sleep (dwMilliseconds=0x3e8) [0116.169] Sleep (dwMilliseconds=0x3e8) [0116.171] Sleep (dwMilliseconds=0x3e8) [0116.174] Sleep (dwMilliseconds=0x3e8) [0116.175] Sleep (dwMilliseconds=0x3e8) [0116.177] Sleep (dwMilliseconds=0x3e8) [0116.331] Sleep (dwMilliseconds=0x3e8) [0116.333] Sleep (dwMilliseconds=0x3e8) [0116.336] Sleep (dwMilliseconds=0x3e8) [0116.337] Sleep (dwMilliseconds=0x3e8) [0116.339] Sleep (dwMilliseconds=0x3e8) [0116.341] Sleep (dwMilliseconds=0x3e8) [0116.343] Sleep (dwMilliseconds=0x3e8) [0116.345] Sleep (dwMilliseconds=0x3e8) [0116.348] Sleep (dwMilliseconds=0x3e8) [0116.349] Sleep (dwMilliseconds=0x3e8) [0116.354] Sleep (dwMilliseconds=0x3e8) [0116.356] Sleep (dwMilliseconds=0x3e8) [0116.358] Sleep (dwMilliseconds=0x3e8) [0116.361] Sleep (dwMilliseconds=0x3e8) [0116.362] Sleep (dwMilliseconds=0x3e8) [0116.364] Sleep (dwMilliseconds=0x3e8) [0116.365] Sleep (dwMilliseconds=0x3e8) [0116.367] Sleep (dwMilliseconds=0x3e8) [0116.369] Sleep (dwMilliseconds=0x3e8) [0116.371] Sleep (dwMilliseconds=0x3e8) [0116.374] Sleep (dwMilliseconds=0x3e8) [0116.376] Sleep (dwMilliseconds=0x3e8) [0116.377] Sleep (dwMilliseconds=0x3e8) [0116.380] Sleep (dwMilliseconds=0x3e8) [0116.381] Sleep (dwMilliseconds=0x3e8) [0116.384] Sleep (dwMilliseconds=0x3e8) [0116.385] Sleep (dwMilliseconds=0x3e8) [0116.388] Sleep (dwMilliseconds=0x3e8) [0116.390] Sleep (dwMilliseconds=0x3e8) [0116.392] Sleep (dwMilliseconds=0x3e8) [0116.394] Sleep (dwMilliseconds=0x3e8) [0116.397] Sleep (dwMilliseconds=0x3e8) [0116.398] Sleep (dwMilliseconds=0x3e8) [0116.580] Sleep (dwMilliseconds=0x3e8) [0116.582] Sleep (dwMilliseconds=0x3e8) [0116.584] Sleep (dwMilliseconds=0x3e8) [0116.586] Sleep (dwMilliseconds=0x3e8) [0116.588] Sleep (dwMilliseconds=0x3e8) [0116.590] Sleep (dwMilliseconds=0x3e8) [0116.593] Sleep (dwMilliseconds=0x3e8) [0116.595] Sleep (dwMilliseconds=0x3e8) [0116.596] Sleep (dwMilliseconds=0x3e8) [0116.598] Sleep (dwMilliseconds=0x3e8) [0116.600] Sleep (dwMilliseconds=0x3e8) [0116.602] Sleep (dwMilliseconds=0x3e8) [0116.604] Sleep (dwMilliseconds=0x3e8) [0116.606] Sleep (dwMilliseconds=0x3e8) [0116.608] Sleep (dwMilliseconds=0x3e8) [0116.610] Sleep (dwMilliseconds=0x3e8) [0116.612] Sleep (dwMilliseconds=0x3e8) [0116.616] Sleep (dwMilliseconds=0x3e8) [0116.618] Sleep (dwMilliseconds=0x3e8) [0116.620] Sleep (dwMilliseconds=0x3e8) [0116.622] Sleep (dwMilliseconds=0x3e8) [0116.624] Sleep (dwMilliseconds=0x3e8) [0116.627] Sleep (dwMilliseconds=0x3e8) [0116.628] Sleep (dwMilliseconds=0x3e8) [0116.814] Sleep (dwMilliseconds=0x3e8) [0116.816] Sleep (dwMilliseconds=0x3e8) [0116.818] Sleep (dwMilliseconds=0x3e8) [0116.820] Sleep (dwMilliseconds=0x3e8) [0116.822] Sleep (dwMilliseconds=0x3e8) [0116.824] Sleep (dwMilliseconds=0x3e8) [0116.828] Sleep (dwMilliseconds=0x3e8) [0117.029] Sleep (dwMilliseconds=0x3e8) [0117.030] Sleep (dwMilliseconds=0x3e8) [0117.034] Sleep (dwMilliseconds=0x3e8) [0117.035] Sleep (dwMilliseconds=0x3e8) [0117.275] Sleep (dwMilliseconds=0x3e8) [0117.277] Sleep (dwMilliseconds=0x3e8) [0117.278] Sleep (dwMilliseconds=0x3e8) [0117.281] Sleep (dwMilliseconds=0x3e8) [0117.282] Sleep (dwMilliseconds=0x3e8) [0117.284] Sleep (dwMilliseconds=0x3e8) [0117.287] Sleep (dwMilliseconds=0x3e8) [0117.288] Sleep (dwMilliseconds=0x3e8) [0117.290] Sleep (dwMilliseconds=0x3e8) [0117.292] Sleep (dwMilliseconds=0x3e8) [0117.467] Sleep (dwMilliseconds=0x3e8) [0117.468] Sleep (dwMilliseconds=0x3e8) [0117.470] Sleep (dwMilliseconds=0x3e8) [0117.472] Sleep (dwMilliseconds=0x3e8) [0117.474] Sleep (dwMilliseconds=0x3e8) [0117.476] Sleep (dwMilliseconds=0x3e8) [0117.478] Sleep (dwMilliseconds=0x3e8) [0117.481] Sleep (dwMilliseconds=0x3e8) [0117.482] Sleep (dwMilliseconds=0x3e8) [0117.484] Sleep (dwMilliseconds=0x3e8) [0117.486] Sleep (dwMilliseconds=0x3e8) [0117.488] Sleep (dwMilliseconds=0x3e8) [0117.491] Sleep (dwMilliseconds=0x3e8) [0117.492] Sleep (dwMilliseconds=0x3e8) [0117.495] Sleep (dwMilliseconds=0x3e8) [0117.497] Sleep (dwMilliseconds=0x3e8) [0117.500] Sleep (dwMilliseconds=0x3e8) [0117.502] Sleep (dwMilliseconds=0x3e8) [0117.504] Sleep (dwMilliseconds=0x3e8) [0117.506] Sleep (dwMilliseconds=0x3e8) [0117.666] Sleep (dwMilliseconds=0x3e8) [0117.667] Sleep (dwMilliseconds=0x3e8) [0117.669] Sleep (dwMilliseconds=0x3e8) [0117.673] Sleep (dwMilliseconds=0x3e8) [0117.675] Sleep (dwMilliseconds=0x3e8) [0117.676] Sleep (dwMilliseconds=0x3e8) [0117.679] Sleep (dwMilliseconds=0x3e8) [0117.680] Sleep (dwMilliseconds=0x3e8) [0117.683] Sleep (dwMilliseconds=0x3e8) [0117.771] Sleep (dwMilliseconds=0x3e8) [0117.775] Sleep (dwMilliseconds=0x3e8) [0117.778] Sleep (dwMilliseconds=0x3e8) [0117.780] Sleep (dwMilliseconds=0x3e8) [0117.783] Sleep (dwMilliseconds=0x3e8) [0117.786] Sleep (dwMilliseconds=0x3e8) [0117.787] Sleep (dwMilliseconds=0x3e8) [0117.791] Sleep (dwMilliseconds=0x3e8) [0117.793] Sleep (dwMilliseconds=0x3e8) [0117.796] Sleep (dwMilliseconds=0x3e8) [0117.797] Sleep (dwMilliseconds=0x3e8) [0117.799] Sleep (dwMilliseconds=0x3e8) [0117.801] Sleep (dwMilliseconds=0x3e8) [0117.813] Sleep (dwMilliseconds=0x3e8) [0117.815] Sleep (dwMilliseconds=0x3e8) [0117.816] Sleep (dwMilliseconds=0x3e8) [0117.818] Sleep (dwMilliseconds=0x3e8) [0117.820] Sleep (dwMilliseconds=0x3e8) [0117.822] Sleep (dwMilliseconds=0x3e8) [0117.834] Sleep (dwMilliseconds=0x3e8) [0117.837] Sleep (dwMilliseconds=0x3e8) [0117.843] Sleep (dwMilliseconds=0x3e8) [0117.844] Sleep (dwMilliseconds=0x3e8) [0117.846] Sleep (dwMilliseconds=0x3e8) [0117.848] Sleep (dwMilliseconds=0x3e8) [0117.850] Sleep (dwMilliseconds=0x3e8) [0117.852] Sleep (dwMilliseconds=0x3e8) [0117.855] Sleep (dwMilliseconds=0x3e8) [0117.859] Sleep (dwMilliseconds=0x3e8) [0117.861] Sleep (dwMilliseconds=0x3e8) [0117.863] Sleep (dwMilliseconds=0x3e8) [0117.864] Sleep (dwMilliseconds=0x3e8) [0117.872] Sleep (dwMilliseconds=0x3e8) [0117.874] Sleep (dwMilliseconds=0x3e8) [0117.875] Sleep (dwMilliseconds=0x3e8) [0117.877] Sleep (dwMilliseconds=0x3e8) [0117.879] Sleep (dwMilliseconds=0x3e8) [0117.884] Sleep (dwMilliseconds=0x3e8) [0117.886] Sleep (dwMilliseconds=0x3e8) [0117.888] Sleep (dwMilliseconds=0x3e8) [0117.893] Sleep (dwMilliseconds=0x3e8) [0117.894] Sleep (dwMilliseconds=0x3e8) [0118.314] Sleep (dwMilliseconds=0x3e8) [0118.328] Sleep (dwMilliseconds=0x3e8) [0118.330] Sleep (dwMilliseconds=0x3e8) [0118.333] Sleep (dwMilliseconds=0x3e8) [0118.335] Sleep (dwMilliseconds=0x3e8) [0118.336] Sleep (dwMilliseconds=0x3e8) [0118.338] Sleep (dwMilliseconds=0x3e8) [0118.340] Sleep (dwMilliseconds=0x3e8) [0118.342] Sleep (dwMilliseconds=0x3e8) [0118.344] Sleep (dwMilliseconds=0x3e8) [0118.345] Sleep (dwMilliseconds=0x3e8) [0118.347] Sleep (dwMilliseconds=0x3e8) [0118.348] Sleep (dwMilliseconds=0x3e8) [0118.349] Sleep (dwMilliseconds=0x3e8) [0118.351] Sleep (dwMilliseconds=0x3e8) [0118.353] Sleep (dwMilliseconds=0x3e8) [0118.355] Sleep (dwMilliseconds=0x3e8) [0118.357] Sleep (dwMilliseconds=0x3e8) [0118.358] Sleep (dwMilliseconds=0x3e8) [0118.360] Sleep (dwMilliseconds=0x3e8) [0118.362] Sleep (dwMilliseconds=0x3e8) [0118.364] Sleep (dwMilliseconds=0x3e8) [0118.366] Sleep (dwMilliseconds=0x3e8) [0118.368] Sleep (dwMilliseconds=0x3e8) [0118.371] Sleep (dwMilliseconds=0x3e8) [0118.372] Sleep (dwMilliseconds=0x3e8) [0118.374] Sleep (dwMilliseconds=0x3e8) [0118.377] Sleep (dwMilliseconds=0x3e8) [0118.378] Sleep (dwMilliseconds=0x3e8) [0118.380] Sleep (dwMilliseconds=0x3e8) [0118.382] Sleep (dwMilliseconds=0x3e8) [0118.385] Sleep (dwMilliseconds=0x3e8) [0118.387] Sleep (dwMilliseconds=0x3e8) [0118.388] Sleep (dwMilliseconds=0x3e8) [0118.390] Sleep (dwMilliseconds=0x3e8) [0118.392] Sleep (dwMilliseconds=0x3e8) [0118.394] Sleep (dwMilliseconds=0x3e8) [0118.396] Sleep (dwMilliseconds=0x3e8) [0118.399] Sleep (dwMilliseconds=0x3e8) [0118.403] Sleep (dwMilliseconds=0x3e8) [0118.405] Sleep (dwMilliseconds=0x3e8) [0118.407] Sleep (dwMilliseconds=0x3e8) [0118.411] Sleep (dwMilliseconds=0x3e8) [0118.414] Sleep (dwMilliseconds=0x3e8) [0118.429] Sleep (dwMilliseconds=0x3e8) [0118.485] Sleep (dwMilliseconds=0x3e8) [0118.486] Sleep (dwMilliseconds=0x3e8) [0118.488] Sleep (dwMilliseconds=0x3e8) [0118.490] Sleep (dwMilliseconds=0x3e8) [0118.493] Sleep (dwMilliseconds=0x3e8) [0118.495] Sleep (dwMilliseconds=0x3e8) [0118.496] Sleep (dwMilliseconds=0x3e8) [0118.498] Sleep (dwMilliseconds=0x3e8) [0118.501] Sleep (dwMilliseconds=0x3e8) [0118.502] Sleep (dwMilliseconds=0x3e8) [0118.505] Sleep (dwMilliseconds=0x3e8) [0118.506] Sleep (dwMilliseconds=0x3e8) [0118.509] Sleep (dwMilliseconds=0x3e8) [0118.510] Sleep (dwMilliseconds=0x3e8) [0118.512] Sleep (dwMilliseconds=0x3e8) [0118.514] Sleep (dwMilliseconds=0x3e8) [0118.516] Sleep (dwMilliseconds=0x3e8) [0118.518] Sleep (dwMilliseconds=0x3e8) [0118.520] Sleep (dwMilliseconds=0x3e8) [0118.522] Sleep (dwMilliseconds=0x3e8) [0118.740] Sleep (dwMilliseconds=0x3e8) [0118.749] Sleep (dwMilliseconds=0x3e8) [0118.752] Sleep (dwMilliseconds=0x3e8) [0118.753] Sleep (dwMilliseconds=0x3e8) [0118.755] Sleep (dwMilliseconds=0x3e8) [0118.758] Sleep (dwMilliseconds=0x3e8) [0118.760] Sleep (dwMilliseconds=0x3e8) [0118.761] Sleep (dwMilliseconds=0x3e8) [0118.763] Sleep (dwMilliseconds=0x3e8) [0118.765] Sleep (dwMilliseconds=0x3e8) [0118.767] Sleep (dwMilliseconds=0x3e8) [0118.769] Sleep (dwMilliseconds=0x3e8) [0118.771] Sleep (dwMilliseconds=0x3e8) [0118.776] Sleep (dwMilliseconds=0x3e8) [0118.780] Sleep (dwMilliseconds=0x3e8) [0118.782] Sleep (dwMilliseconds=0x3e8) [0118.784] Sleep (dwMilliseconds=0x3e8) [0118.785] Sleep (dwMilliseconds=0x3e8) [0118.787] Sleep (dwMilliseconds=0x3e8) [0118.789] Sleep (dwMilliseconds=0x3e8) [0118.791] Sleep (dwMilliseconds=0x3e8) [0118.795] Sleep (dwMilliseconds=0x3e8) [0118.797] Sleep (dwMilliseconds=0x3e8) [0118.798] Sleep (dwMilliseconds=0x3e8) [0118.800] Sleep (dwMilliseconds=0x3e8) [0118.802] Sleep (dwMilliseconds=0x3e8) [0118.812] Sleep (dwMilliseconds=0x3e8) [0118.814] Sleep (dwMilliseconds=0x3e8) [0118.818] Sleep (dwMilliseconds=0x3e8) [0118.819] Sleep (dwMilliseconds=0x3e8) [0118.825] Sleep (dwMilliseconds=0x3e8) [0118.828] Sleep (dwMilliseconds=0x3e8) [0119.165] Sleep (dwMilliseconds=0x3e8) [0119.167] Sleep (dwMilliseconds=0x3e8) [0119.169] Sleep (dwMilliseconds=0x3e8) [0119.170] Sleep (dwMilliseconds=0x3e8) [0119.172] Sleep (dwMilliseconds=0x3e8) [0119.173] Sleep (dwMilliseconds=0x3e8) [0119.175] Sleep (dwMilliseconds=0x3e8) [0119.177] Sleep (dwMilliseconds=0x3e8) [0119.179] Sleep (dwMilliseconds=0x3e8) [0119.181] Sleep (dwMilliseconds=0x3e8) [0119.184] Sleep (dwMilliseconds=0x3e8) [0119.185] Sleep (dwMilliseconds=0x3e8) [0119.187] Sleep (dwMilliseconds=0x3e8) [0119.189] Sleep (dwMilliseconds=0x3e8) [0119.191] Sleep (dwMilliseconds=0x3e8) [0119.193] Sleep (dwMilliseconds=0x3e8) [0119.195] Sleep (dwMilliseconds=0x3e8) [0119.197] Sleep (dwMilliseconds=0x3e8) [0119.201] Sleep (dwMilliseconds=0x3e8) [0119.202] Sleep (dwMilliseconds=0x3e8) [0119.204] Sleep (dwMilliseconds=0x3e8) [0119.206] Sleep (dwMilliseconds=0x3e8) [0119.296] Sleep (dwMilliseconds=0x3e8) [0119.297] Sleep (dwMilliseconds=0x3e8) [0119.302] Sleep (dwMilliseconds=0x3e8) [0119.304] Sleep (dwMilliseconds=0x3e8) [0119.306] Sleep (dwMilliseconds=0x3e8) [0119.307] Sleep (dwMilliseconds=0x3e8) [0119.310] Sleep (dwMilliseconds=0x3e8) [0119.321] Sleep (dwMilliseconds=0x3e8) [0119.322] Sleep (dwMilliseconds=0x3e8) [0119.324] Sleep (dwMilliseconds=0x3e8) [0119.326] Sleep (dwMilliseconds=0x3e8) [0119.328] Sleep (dwMilliseconds=0x3e8) [0119.330] Sleep (dwMilliseconds=0x3e8) [0119.331] Sleep (dwMilliseconds=0x3e8) [0119.333] Sleep (dwMilliseconds=0x3e8) [0119.335] Sleep (dwMilliseconds=0x3e8) [0119.338] Sleep (dwMilliseconds=0x3e8) [0119.381] Sleep (dwMilliseconds=0x3e8) [0119.382] Sleep (dwMilliseconds=0x3e8) [0119.384] Sleep (dwMilliseconds=0x3e8) [0119.386] Sleep (dwMilliseconds=0x3e8) [0119.388] Sleep (dwMilliseconds=0x3e8) [0119.390] Sleep (dwMilliseconds=0x3e8) [0119.392] Sleep (dwMilliseconds=0x3e8) [0119.394] Sleep (dwMilliseconds=0x3e8) [0119.396] Sleep (dwMilliseconds=0x3e8) [0119.398] Sleep (dwMilliseconds=0x3e8) [0119.400] Sleep (dwMilliseconds=0x3e8) [0119.403] Sleep (dwMilliseconds=0x3e8) [0119.406] Sleep (dwMilliseconds=0x3e8) [0119.408] Sleep (dwMilliseconds=0x3e8) [0119.410] Sleep (dwMilliseconds=0x3e8) [0119.411] Sleep (dwMilliseconds=0x3e8) [0119.414] Sleep (dwMilliseconds=0x3e8) [0119.416] Sleep (dwMilliseconds=0x3e8) [0119.417] Sleep (dwMilliseconds=0x3e8) [0119.419] Sleep (dwMilliseconds=0x3e8) [0119.421] Sleep (dwMilliseconds=0x3e8) [0119.423] Sleep (dwMilliseconds=0x3e8) [0119.425] Sleep (dwMilliseconds=0x3e8) [0119.427] Sleep (dwMilliseconds=0x3e8) [0119.429] Sleep (dwMilliseconds=0x3e8) [0119.431] Sleep (dwMilliseconds=0x3e8) [0119.433] Sleep (dwMilliseconds=0x3e8) [0119.435] Sleep (dwMilliseconds=0x3e8) [0119.437] Sleep (dwMilliseconds=0x3e8) [0119.441] Sleep (dwMilliseconds=0x3e8) [0119.444] Sleep (dwMilliseconds=0x3e8) [0119.446] Sleep (dwMilliseconds=0x3e8) [0119.448] Sleep (dwMilliseconds=0x3e8) [0119.450] Sleep (dwMilliseconds=0x3e8) [0119.451] Sleep (dwMilliseconds=0x3e8) [0119.453] Sleep (dwMilliseconds=0x3e8) [0119.765] Sleep (dwMilliseconds=0x3e8) [0119.766] Sleep (dwMilliseconds=0x3e8) [0119.768] Sleep (dwMilliseconds=0x3e8) [0119.770] Sleep (dwMilliseconds=0x3e8) [0119.773] Sleep (dwMilliseconds=0x3e8) [0119.774] Sleep (dwMilliseconds=0x3e8) [0119.776] Sleep (dwMilliseconds=0x3e8) [0119.777] Sleep (dwMilliseconds=0x3e8) [0119.779] Sleep (dwMilliseconds=0x3e8) [0119.781] Sleep (dwMilliseconds=0x3e8) [0119.782] Sleep (dwMilliseconds=0x3e8) [0119.784] Sleep (dwMilliseconds=0x3e8) [0119.786] Sleep (dwMilliseconds=0x3e8) [0119.788] Sleep (dwMilliseconds=0x3e8) [0119.790] Sleep (dwMilliseconds=0x3e8) [0119.792] Sleep (dwMilliseconds=0x3e8) [0119.794] Sleep (dwMilliseconds=0x3e8) [0119.796] Sleep (dwMilliseconds=0x3e8) [0119.798] Sleep (dwMilliseconds=0x3e8) [0119.801] Sleep (dwMilliseconds=0x3e8) [0119.812] Sleep (dwMilliseconds=0x3e8) [0119.813] Sleep (dwMilliseconds=0x3e8) [0119.816] Sleep (dwMilliseconds=0x3e8) [0119.817] Sleep (dwMilliseconds=0x3e8) [0119.819] Sleep (dwMilliseconds=0x3e8) [0119.821] Sleep (dwMilliseconds=0x3e8) [0119.826] Sleep (dwMilliseconds=0x3e8) [0119.827] Sleep (dwMilliseconds=0x3e8) [0119.830] Sleep (dwMilliseconds=0x3e8) [0119.832] Sleep (dwMilliseconds=0x3e8) [0119.833] Sleep (dwMilliseconds=0x3e8) [0119.835] Sleep (dwMilliseconds=0x3e8) [0119.837] Sleep (dwMilliseconds=0x3e8) [0119.839] Sleep (dwMilliseconds=0x3e8) [0119.841] Sleep (dwMilliseconds=0x3e8) [0119.843] Sleep (dwMilliseconds=0x3e8) [0119.845] Sleep (dwMilliseconds=0x3e8) [0119.847] Sleep (dwMilliseconds=0x3e8) [0119.940] Sleep (dwMilliseconds=0x3e8) [0119.942] Sleep (dwMilliseconds=0x3e8) [0119.943] Sleep (dwMilliseconds=0x3e8) [0119.945] Sleep (dwMilliseconds=0x3e8) [0119.946] Sleep (dwMilliseconds=0x3e8) [0119.951] Sleep (dwMilliseconds=0x3e8) [0119.953] Sleep (dwMilliseconds=0x3e8) [0119.956] Sleep (dwMilliseconds=0x3e8) [0119.958] Sleep (dwMilliseconds=0x3e8) [0119.959] Sleep (dwMilliseconds=0x3e8) [0119.962] Sleep (dwMilliseconds=0x3e8) [0119.963] Sleep (dwMilliseconds=0x3e8) [0119.965] Sleep (dwMilliseconds=0x3e8) [0119.967] Sleep (dwMilliseconds=0x3e8) [0119.969] Sleep (dwMilliseconds=0x3e8) [0119.972] Sleep (dwMilliseconds=0x3e8) [0119.974] Sleep (dwMilliseconds=0x3e8) [0119.975] Sleep (dwMilliseconds=0x3e8) [0119.977] Sleep (dwMilliseconds=0x3e8) [0119.979] Sleep (dwMilliseconds=0x3e8) [0119.981] Sleep (dwMilliseconds=0x3e8) [0119.982] Sleep (dwMilliseconds=0x3e8) [0119.985] Sleep (dwMilliseconds=0x3e8) [0119.986] Sleep (dwMilliseconds=0x3e8) [0119.988] Sleep (dwMilliseconds=0x3e8) [0119.990] Sleep (dwMilliseconds=0x3e8) [0119.992] Sleep (dwMilliseconds=0x3e8) [0119.994] Sleep (dwMilliseconds=0x3e8) [0119.996] Sleep (dwMilliseconds=0x3e8) [0119.997] Sleep (dwMilliseconds=0x3e8) [0119.999] Sleep (dwMilliseconds=0x3e8) [0120.001] Sleep (dwMilliseconds=0x3e8) [0120.004] Sleep (dwMilliseconds=0x3e8) [0120.005] Sleep (dwMilliseconds=0x3e8) [0120.007] Sleep (dwMilliseconds=0x3e8) [0120.009] Sleep (dwMilliseconds=0x3e8) [0120.011] Sleep (dwMilliseconds=0x3e8) [0120.014] Sleep (dwMilliseconds=0x3e8) [0120.016] Sleep (dwMilliseconds=0x3e8) [0120.019] Sleep (dwMilliseconds=0x3e8) [0120.022] Sleep (dwMilliseconds=0x3e8) [0120.023] Sleep (dwMilliseconds=0x3e8) [0120.026] Sleep (dwMilliseconds=0x3e8) [0120.028] Sleep (dwMilliseconds=0x3e8) [0120.029] Sleep (dwMilliseconds=0x3e8) [0120.031] Sleep (dwMilliseconds=0x3e8) [0120.033] Sleep (dwMilliseconds=0x3e8) [0120.036] Sleep (dwMilliseconds=0x3e8) [0120.038] Sleep (dwMilliseconds=0x3e8) [0120.041] Sleep (dwMilliseconds=0x3e8) [0120.042] Sleep (dwMilliseconds=0x3e8) [0120.044] Sleep (dwMilliseconds=0x3e8) [0120.047] Sleep (dwMilliseconds=0x3e8) [0120.048] Sleep (dwMilliseconds=0x3e8) [0120.050] Sleep (dwMilliseconds=0x3e8) [0120.052] Sleep (dwMilliseconds=0x3e8) [0120.054] Sleep (dwMilliseconds=0x3e8) [0120.058] Sleep (dwMilliseconds=0x3e8) [0120.059] Sleep (dwMilliseconds=0x3e8) [0120.061] Sleep (dwMilliseconds=0x3e8) [0120.063] Sleep (dwMilliseconds=0x3e8) [0120.065] Sleep (dwMilliseconds=0x3e8) [0120.068] Sleep (dwMilliseconds=0x3e8) [0120.070] Sleep (dwMilliseconds=0x3e8) [0120.071] Sleep (dwMilliseconds=0x3e8) [0120.074] Sleep (dwMilliseconds=0x3e8) [0120.076] Sleep (dwMilliseconds=0x3e8) [0120.078] Sleep (dwMilliseconds=0x3e8) [0120.189] Sleep (dwMilliseconds=0x3e8) [0120.191] Sleep (dwMilliseconds=0x3e8) [0120.193] Sleep (dwMilliseconds=0x3e8) [0120.194] Sleep (dwMilliseconds=0x3e8) [0120.196] Sleep (dwMilliseconds=0x3e8) [0120.198] Sleep (dwMilliseconds=0x3e8) [0120.199] Sleep (dwMilliseconds=0x3e8) [0120.201] Sleep (dwMilliseconds=0x3e8) [0120.203] Sleep (dwMilliseconds=0x3e8) [0120.205] Sleep (dwMilliseconds=0x3e8) [0120.207] Sleep (dwMilliseconds=0x3e8) [0120.209] Sleep (dwMilliseconds=0x3e8) [0120.211] Sleep (dwMilliseconds=0x3e8) [0120.212] Sleep (dwMilliseconds=0x3e8) [0120.214] Sleep (dwMilliseconds=0x3e8) [0120.216] Sleep (dwMilliseconds=0x3e8) [0120.219] Sleep (dwMilliseconds=0x3e8) [0120.220] Sleep (dwMilliseconds=0x3e8) [0120.222] Sleep (dwMilliseconds=0x3e8) [0120.224] Sleep (dwMilliseconds=0x3e8) [0120.226] Sleep (dwMilliseconds=0x3e8) [0120.228] Sleep (dwMilliseconds=0x3e8) [0120.230] Sleep (dwMilliseconds=0x3e8) [0120.272] Sleep (dwMilliseconds=0x3e8) [0120.305] Sleep (dwMilliseconds=0x3e8) [0120.307] Sleep (dwMilliseconds=0x3e8) [0120.309] Sleep (dwMilliseconds=0x3e8) [0120.311] Sleep (dwMilliseconds=0x3e8) [0120.313] Sleep (dwMilliseconds=0x3e8) [0120.315] Sleep (dwMilliseconds=0x3e8) [0120.320] Sleep (dwMilliseconds=0x3e8) [0120.322] Sleep (dwMilliseconds=0x3e8) [0120.323] Sleep (dwMilliseconds=0x3e8) [0120.325] Sleep (dwMilliseconds=0x3e8) [0120.328] Sleep (dwMilliseconds=0x3e8) [0120.329] Sleep (dwMilliseconds=0x3e8) [0120.331] Sleep (dwMilliseconds=0x3e8) [0120.333] Sleep (dwMilliseconds=0x3e8) [0120.335] Sleep (dwMilliseconds=0x3e8) [0120.337] Sleep (dwMilliseconds=0x3e8) [0120.339] Sleep (dwMilliseconds=0x3e8) [0120.341] Sleep (dwMilliseconds=0x3e8) [0120.343] Sleep (dwMilliseconds=0x3e8) [0120.345] Sleep (dwMilliseconds=0x3e8) [0120.348] Sleep (dwMilliseconds=0x3e8) [0120.349] Sleep (dwMilliseconds=0x3e8) [0120.351] Sleep (dwMilliseconds=0x3e8) [0120.452] Sleep (dwMilliseconds=0x3e8) [0120.453] Sleep (dwMilliseconds=0x3e8) [0120.455] Sleep (dwMilliseconds=0x3e8) [0120.457] Sleep (dwMilliseconds=0x3e8) [0120.458] Sleep (dwMilliseconds=0x3e8) [0120.460] Sleep (dwMilliseconds=0x3e8) [0120.462] Sleep (dwMilliseconds=0x3e8) [0120.465] Sleep (dwMilliseconds=0x3e8) [0120.466] Sleep (dwMilliseconds=0x3e8) [0120.468] Sleep (dwMilliseconds=0x3e8) [0120.471] Sleep (dwMilliseconds=0x3e8) [0120.499] Sleep (dwMilliseconds=0x3e8) [0120.501] Sleep (dwMilliseconds=0x3e8) [0120.503] Sleep (dwMilliseconds=0x3e8) [0120.505] Sleep (dwMilliseconds=0x3e8) [0120.506] Sleep (dwMilliseconds=0x3e8) [0120.508] Sleep (dwMilliseconds=0x3e8) [0120.510] Sleep (dwMilliseconds=0x3e8) [0120.511] Sleep (dwMilliseconds=0x3e8) [0120.513] Sleep (dwMilliseconds=0x3e8) [0120.515] Sleep (dwMilliseconds=0x3e8) [0120.517] Sleep (dwMilliseconds=0x3e8) [0120.519] Sleep (dwMilliseconds=0x3e8) [0120.521] Sleep (dwMilliseconds=0x3e8) [0120.522] Sleep (dwMilliseconds=0x3e8) [0120.524] Sleep (dwMilliseconds=0x3e8) [0120.526] Sleep (dwMilliseconds=0x3e8) [0120.530] Sleep (dwMilliseconds=0x3e8) [0120.532] Sleep (dwMilliseconds=0x3e8) [0120.535] Sleep (dwMilliseconds=0x3e8) [0120.537] Sleep (dwMilliseconds=0x3e8) [0120.538] Sleep (dwMilliseconds=0x3e8) [0120.540] Sleep (dwMilliseconds=0x3e8) [0120.542] Sleep (dwMilliseconds=0x3e8) [0120.544] Sleep (dwMilliseconds=0x3e8) [0120.546] Sleep (dwMilliseconds=0x3e8) [0120.548] Sleep (dwMilliseconds=0x3e8) [0120.551] Sleep (dwMilliseconds=0x3e8) [0120.552] Sleep (dwMilliseconds=0x3e8) [0120.555] Sleep (dwMilliseconds=0x3e8) [0120.556] Sleep (dwMilliseconds=0x3e8) [0120.558] Sleep (dwMilliseconds=0x3e8) [0120.560] Sleep (dwMilliseconds=0x3e8) [0120.562] Sleep (dwMilliseconds=0x3e8) [0120.564] Sleep (dwMilliseconds=0x3e8) [0120.566] Sleep (dwMilliseconds=0x3e8) [0120.568] Sleep (dwMilliseconds=0x3e8) [0120.893] Sleep (dwMilliseconds=0x3e8) [0120.895] Sleep (dwMilliseconds=0x3e8) [0120.897] Sleep (dwMilliseconds=0x3e8) [0120.901] Sleep (dwMilliseconds=0x3e8) [0120.903] Sleep (dwMilliseconds=0x3e8) [0120.906] Sleep (dwMilliseconds=0x3e8) [0120.908] Sleep (dwMilliseconds=0x3e8) [0120.912] Sleep (dwMilliseconds=0x3e8) [0120.913] Sleep (dwMilliseconds=0x3e8) [0120.919] Sleep (dwMilliseconds=0x3e8) [0120.921] Sleep (dwMilliseconds=0x3e8) [0120.922] Sleep (dwMilliseconds=0x3e8) [0120.924] Sleep (dwMilliseconds=0x3e8) [0120.926] Sleep (dwMilliseconds=0x3e8) [0120.929] Sleep (dwMilliseconds=0x3e8) [0120.932] Sleep (dwMilliseconds=0x3e8) [0120.933] Sleep (dwMilliseconds=0x3e8) [0120.935] Sleep (dwMilliseconds=0x3e8) [0120.937] Sleep (dwMilliseconds=0x3e8) [0120.939] Sleep (dwMilliseconds=0x3e8) [0120.941] Sleep (dwMilliseconds=0x3e8) [0120.949] Sleep (dwMilliseconds=0x3e8) [0120.952] Sleep (dwMilliseconds=0x3e8) [0120.954] Sleep (dwMilliseconds=0x3e8) [0120.955] Sleep (dwMilliseconds=0x3e8) [0120.956] Sleep (dwMilliseconds=0x3e8) [0120.958] Sleep (dwMilliseconds=0x3e8) [0120.960] Sleep (dwMilliseconds=0x3e8) [0120.962] Sleep (dwMilliseconds=0x3e8) [0120.964] Sleep (dwMilliseconds=0x3e8) [0120.966] Sleep (dwMilliseconds=0x3e8) [0120.968] Sleep (dwMilliseconds=0x3e8) [0120.970] Sleep (dwMilliseconds=0x3e8) [0120.975] Sleep (dwMilliseconds=0x3e8) [0120.976] Sleep (dwMilliseconds=0x3e8) [0120.978] Sleep (dwMilliseconds=0x3e8) [0120.981] Sleep (dwMilliseconds=0x3e8) [0120.982] Sleep (dwMilliseconds=0x3e8) [0120.984] Sleep (dwMilliseconds=0x3e8) [0120.986] Sleep (dwMilliseconds=0x3e8) [0120.988] Sleep (dwMilliseconds=0x3e8) [0120.989] Sleep (dwMilliseconds=0x3e8) [0120.991] Sleep (dwMilliseconds=0x3e8) [0120.993] Sleep (dwMilliseconds=0x3e8) [0120.995] Sleep (dwMilliseconds=0x3e8) [0120.997] Sleep (dwMilliseconds=0x3e8) [0121.000] Sleep (dwMilliseconds=0x3e8) [0121.001] Sleep (dwMilliseconds=0x3e8) [0121.003] Sleep (dwMilliseconds=0x3e8) [0121.005] Sleep (dwMilliseconds=0x3e8) [0121.008] Sleep (dwMilliseconds=0x3e8) [0121.387] Sleep (dwMilliseconds=0x3e8) [0121.390] Sleep (dwMilliseconds=0x3e8) [0121.392] Sleep (dwMilliseconds=0x3e8) [0121.394] Sleep (dwMilliseconds=0x3e8) [0121.396] Sleep (dwMilliseconds=0x3e8) [0121.398] Sleep (dwMilliseconds=0x3e8) [0121.400] Sleep (dwMilliseconds=0x3e8) [0121.402] Sleep (dwMilliseconds=0x3e8) [0121.404] Sleep (dwMilliseconds=0x3e8) [0121.406] Sleep (dwMilliseconds=0x3e8) [0121.409] Sleep (dwMilliseconds=0x3e8) [0121.411] Sleep (dwMilliseconds=0x3e8) [0121.413] Sleep (dwMilliseconds=0x3e8) [0121.415] Sleep (dwMilliseconds=0x3e8) [0121.416] Sleep (dwMilliseconds=0x3e8) [0121.421] Sleep (dwMilliseconds=0x3e8) [0121.428] Sleep (dwMilliseconds=0x3e8) [0121.429] Sleep (dwMilliseconds=0x3e8) [0121.432] Sleep (dwMilliseconds=0x3e8) [0121.434] Sleep (dwMilliseconds=0x3e8) [0121.435] Sleep (dwMilliseconds=0x3e8) [0121.437] Sleep (dwMilliseconds=0x3e8) [0121.440] Sleep (dwMilliseconds=0x3e8) [0121.441] Sleep (dwMilliseconds=0x3e8) [0121.444] Sleep (dwMilliseconds=0x3e8) [0121.445] Sleep (dwMilliseconds=0x3e8) [0121.789] Sleep (dwMilliseconds=0x3e8) [0121.791] Sleep (dwMilliseconds=0x3e8) [0121.792] Sleep (dwMilliseconds=0x3e8) [0121.794] Sleep (dwMilliseconds=0x3e8) [0121.796] Sleep (dwMilliseconds=0x3e8) [0121.798] Sleep (dwMilliseconds=0x3e8) [0121.800] Sleep (dwMilliseconds=0x3e8) [0121.803] Sleep (dwMilliseconds=0x3e8) [0121.806] Sleep (dwMilliseconds=0x3e8) [0121.808] Sleep (dwMilliseconds=0x3e8) [0121.810] Sleep (dwMilliseconds=0x3e8) [0121.812] Sleep (dwMilliseconds=0x3e8) [0121.815] Sleep (dwMilliseconds=0x3e8) [0121.818] Sleep (dwMilliseconds=0x3e8) [0121.819] Sleep (dwMilliseconds=0x3e8) [0121.821] Sleep (dwMilliseconds=0x3e8) [0121.822] Sleep (dwMilliseconds=0x3e8) [0121.824] Sleep (dwMilliseconds=0x3e8) [0121.827] Sleep (dwMilliseconds=0x3e8) [0121.829] Sleep (dwMilliseconds=0x3e8) [0121.830] Sleep (dwMilliseconds=0x3e8) [0121.832] Sleep (dwMilliseconds=0x3e8) [0121.834] Sleep (dwMilliseconds=0x3e8) [0121.836] Sleep (dwMilliseconds=0x3e8) [0121.839] Sleep (dwMilliseconds=0x3e8) [0121.840] Sleep (dwMilliseconds=0x3e8) [0121.842] Sleep (dwMilliseconds=0x3e8) [0121.846] Sleep (dwMilliseconds=0x3e8) [0121.848] Sleep (dwMilliseconds=0x3e8) [0121.850] Sleep (dwMilliseconds=0x3e8) [0121.852] Sleep (dwMilliseconds=0x3e8) [0121.856] Sleep (dwMilliseconds=0x3e8) [0121.859] Sleep (dwMilliseconds=0x3e8) [0121.861] Sleep (dwMilliseconds=0x3e8) [0121.862] Sleep (dwMilliseconds=0x3e8) [0121.865] Sleep (dwMilliseconds=0x3e8) [0121.867] Sleep (dwMilliseconds=0x3e8) [0121.868] Sleep (dwMilliseconds=0x3e8) [0121.870] Sleep (dwMilliseconds=0x3e8) [0121.871] Sleep (dwMilliseconds=0x3e8) [0121.874] Sleep (dwMilliseconds=0x3e8) [0121.875] Sleep (dwMilliseconds=0x3e8) [0121.890] Sleep (dwMilliseconds=0x3e8) [0121.891] Sleep (dwMilliseconds=0x3e8) [0121.895] Sleep (dwMilliseconds=0x3e8) [0121.909] Sleep (dwMilliseconds=0x3e8) [0121.911] Sleep (dwMilliseconds=0x3e8) [0121.913] Sleep (dwMilliseconds=0x3e8) [0121.914] Sleep (dwMilliseconds=0x3e8) [0121.917] Sleep (dwMilliseconds=0x3e8) [0121.920] Sleep (dwMilliseconds=0x3e8) [0121.921] Sleep (dwMilliseconds=0x3e8) [0121.923] Sleep (dwMilliseconds=0x3e8) [0121.924] Sleep (dwMilliseconds=0x3e8) [0121.926] Sleep (dwMilliseconds=0x3e8) [0121.928] Sleep (dwMilliseconds=0x3e8) [0121.930] Sleep (dwMilliseconds=0x3e8) [0121.932] Sleep (dwMilliseconds=0x3e8) [0121.935] Sleep (dwMilliseconds=0x3e8) [0121.937] Sleep (dwMilliseconds=0x3e8) [0121.938] Sleep (dwMilliseconds=0x3e8) [0121.941] Sleep (dwMilliseconds=0x3e8) [0121.942] Sleep (dwMilliseconds=0x3e8) [0121.944] Sleep (dwMilliseconds=0x3e8) [0121.946] Sleep (dwMilliseconds=0x3e8) [0121.948] Sleep (dwMilliseconds=0x3e8) [0121.950] Sleep (dwMilliseconds=0x3e8) [0121.952] Sleep (dwMilliseconds=0x3e8) [0121.956] Sleep (dwMilliseconds=0x3e8) [0121.958] Sleep (dwMilliseconds=0x3e8) [0121.959] Sleep (dwMilliseconds=0x3e8) [0121.961] Sleep (dwMilliseconds=0x3e8) [0121.963] Sleep (dwMilliseconds=0x3e8) [0121.965] Sleep (dwMilliseconds=0x3e8) [0121.973] Sleep (dwMilliseconds=0x3e8) [0121.975] Sleep (dwMilliseconds=0x3e8) [0121.976] Sleep (dwMilliseconds=0x3e8) [0121.979] Sleep (dwMilliseconds=0x3e8) [0121.980] Sleep (dwMilliseconds=0x3e8) [0121.982] Sleep (dwMilliseconds=0x3e8) [0121.984] Sleep (dwMilliseconds=0x3e8) [0121.986] Sleep (dwMilliseconds=0x3e8) [0121.988] Sleep (dwMilliseconds=0x3e8) [0121.990] Sleep (dwMilliseconds=0x3e8) [0121.992] Sleep (dwMilliseconds=0x3e8) [0121.995] Sleep (dwMilliseconds=0x3e8) [0121.996] Sleep (dwMilliseconds=0x3e8) [0121.999] Sleep (dwMilliseconds=0x3e8) [0122.001] Sleep (dwMilliseconds=0x3e8) [0123.025] Sleep (dwMilliseconds=0x3e8) [0123.027] Sleep (dwMilliseconds=0x3e8) [0123.032] Sleep (dwMilliseconds=0x3e8) [0123.067] Sleep (dwMilliseconds=0x3e8) [0123.068] Sleep (dwMilliseconds=0x3e8) [0123.070] Sleep (dwMilliseconds=0x3e8) [0123.072] Sleep (dwMilliseconds=0x3e8) [0123.074] Sleep (dwMilliseconds=0x3e8) [0123.077] Sleep (dwMilliseconds=0x3e8) [0123.078] Sleep (dwMilliseconds=0x3e8) [0123.080] Sleep (dwMilliseconds=0x3e8) [0123.089] Sleep (dwMilliseconds=0x3e8) [0123.092] Sleep (dwMilliseconds=0x3e8) [0123.094] Sleep (dwMilliseconds=0x3e8) [0123.095] Sleep (dwMilliseconds=0x3e8) [0123.098] Sleep (dwMilliseconds=0x3e8) [0123.101] Sleep (dwMilliseconds=0x3e8) [0123.103] Sleep (dwMilliseconds=0x3e8) [0123.105] Sleep (dwMilliseconds=0x3e8) [0123.108] Sleep (dwMilliseconds=0x3e8) [0123.109] Sleep (dwMilliseconds=0x3e8) [0123.111] Sleep (dwMilliseconds=0x3e8) [0123.113] Sleep (dwMilliseconds=0x3e8) [0123.127] Sleep (dwMilliseconds=0x3e8) [0123.129] Sleep (dwMilliseconds=0x3e8) [0123.130] Sleep (dwMilliseconds=0x3e8) [0123.133] Sleep (dwMilliseconds=0x3e8) [0123.134] Sleep (dwMilliseconds=0x3e8) [0123.137] Sleep (dwMilliseconds=0x3e8) [0123.139] Sleep (dwMilliseconds=0x3e8) [0123.141] Sleep (dwMilliseconds=0x3e8) [0123.143] Sleep (dwMilliseconds=0x3e8) [0123.145] Sleep (dwMilliseconds=0x3e8) [0123.147] Sleep (dwMilliseconds=0x3e8) [0123.148] Sleep (dwMilliseconds=0x3e8) [0123.152] Sleep (dwMilliseconds=0x3e8) [0123.154] Sleep (dwMilliseconds=0x3e8) [0123.157] Sleep (dwMilliseconds=0x3e8) [0123.158] Sleep (dwMilliseconds=0x3e8) [0123.160] Sleep (dwMilliseconds=0x3e8) [0123.162] Sleep (dwMilliseconds=0x3e8) [0123.163] Sleep (dwMilliseconds=0x3e8) [0123.165] Sleep (dwMilliseconds=0x3e8) [0123.167] Sleep (dwMilliseconds=0x3e8) [0123.170] Sleep (dwMilliseconds=0x3e8) [0123.171] Sleep (dwMilliseconds=0x3e8) [0123.173] Sleep (dwMilliseconds=0x3e8) [0123.176] Sleep (dwMilliseconds=0x3e8) [0123.177] Sleep (dwMilliseconds=0x3e8) [0123.179] Sleep (dwMilliseconds=0x3e8) [0123.182] Sleep (dwMilliseconds=0x3e8) [0123.183] Sleep (dwMilliseconds=0x3e8) [0123.749] Sleep (dwMilliseconds=0x3e8) [0123.764] Sleep (dwMilliseconds=0x3e8) [0123.765] Sleep (dwMilliseconds=0x3e8) [0123.768] Sleep (dwMilliseconds=0x3e8) [0123.770] Sleep (dwMilliseconds=0x3e8) [0123.772] Sleep (dwMilliseconds=0x3e8) [0123.773] Sleep (dwMilliseconds=0x3e8) [0123.776] Sleep (dwMilliseconds=0x3e8) [0123.778] Sleep (dwMilliseconds=0x3e8) [0123.780] Sleep (dwMilliseconds=0x3e8) [0123.781] Sleep (dwMilliseconds=0x3e8) [0123.785] Sleep (dwMilliseconds=0x3e8) [0123.811] Sleep (dwMilliseconds=0x3e8) [0123.866] Sleep (dwMilliseconds=0x3e8) [0123.903] Sleep (dwMilliseconds=0x3e8) [0123.934] Sleep (dwMilliseconds=0x3e8) [0124.030] Sleep (dwMilliseconds=0x3e8) [0124.071] Sleep (dwMilliseconds=0x3e8) [0124.093] Sleep (dwMilliseconds=0x3e8) [0124.112] Sleep (dwMilliseconds=0x3e8) [0124.146] Sleep (dwMilliseconds=0x3e8) [0124.148] Sleep (dwMilliseconds=0x3e8) [0124.151] Sleep (dwMilliseconds=0x3e8) [0124.196] Sleep (dwMilliseconds=0x3e8) [0124.205] Sleep (dwMilliseconds=0x3e8) [0124.212] Sleep (dwMilliseconds=0x3e8) [0124.248] Sleep (dwMilliseconds=0x3e8) [0124.283] Sleep (dwMilliseconds=0x3e8) [0124.428] Sleep (dwMilliseconds=0x3e8) [0124.506] Sleep (dwMilliseconds=0x3e8) [0124.606] Sleep (dwMilliseconds=0x3e8) [0124.727] Sleep (dwMilliseconds=0x3e8) [0124.904] Sleep (dwMilliseconds=0x3e8) [0125.057] Sleep (dwMilliseconds=0x3e8) [0125.188] Sleep (dwMilliseconds=0x3e8) [0125.271] Sleep (dwMilliseconds=0x3e8) [0125.276] Sleep (dwMilliseconds=0x3e8) [0125.340] Sleep (dwMilliseconds=0x3e8) [0125.526] Sleep (dwMilliseconds=0x3e8) [0125.692] Sleep (dwMilliseconds=0x3e8) [0125.767] Sleep (dwMilliseconds=0x3e8) [0125.768] Sleep (dwMilliseconds=0x3e8) [0125.821] Sleep (dwMilliseconds=0x3e8) [0125.920] Sleep (dwMilliseconds=0x3e8) [0126.082] Sleep (dwMilliseconds=0x3e8) [0126.182] Sleep (dwMilliseconds=0x3e8) [0126.239] Sleep (dwMilliseconds=0x3e8) [0126.355] Sleep (dwMilliseconds=0x3e8) [0126.454] Sleep (dwMilliseconds=0x3e8) [0126.560] Sleep (dwMilliseconds=0x3e8) [0126.641] Sleep (dwMilliseconds=0x3e8) [0126.718] Sleep (dwMilliseconds=0x3e8) [0126.833] Sleep (dwMilliseconds=0x3e8) [0126.939] Sleep (dwMilliseconds=0x3e8) [0127.074] Sleep (dwMilliseconds=0x3e8) [0127.112] Sleep (dwMilliseconds=0x3e8) [0127.141] Sleep (dwMilliseconds=0x3e8) [0127.257] Sleep (dwMilliseconds=0x3e8) [0127.348] Sleep (dwMilliseconds=0x3e8) [0127.457] Sleep (dwMilliseconds=0x3e8) [0127.509] Sleep (dwMilliseconds=0x3e8) [0127.562] Sleep (dwMilliseconds=0x3e8) [0127.648] Sleep (dwMilliseconds=0x3e8) [0127.735] Sleep (dwMilliseconds=0x3e8) [0127.798] Sleep (dwMilliseconds=0x3e8) [0127.983] Sleep (dwMilliseconds=0x3e8) [0128.018] Sleep (dwMilliseconds=0x3e8) [0128.052] Sleep (dwMilliseconds=0x3e8) [0128.086] Sleep (dwMilliseconds=0x3e8) [0128.120] Sleep (dwMilliseconds=0x3e8) [0128.157] Sleep (dwMilliseconds=0x3e8) [0128.191] Sleep (dwMilliseconds=0x3e8) [0128.227] Sleep (dwMilliseconds=0x3e8) [0128.262] Sleep (dwMilliseconds=0x3e8) [0128.304] Sleep (dwMilliseconds=0x3e8) [0128.340] Sleep (dwMilliseconds=0x3e8) [0128.373] Sleep (dwMilliseconds=0x3e8) [0128.411] Sleep (dwMilliseconds=0x3e8) [0128.448] Sleep (dwMilliseconds=0x3e8) [0128.464] Sleep (dwMilliseconds=0x3e8) [0128.480] Sleep (dwMilliseconds=0x3e8) [0128.482] Sleep (dwMilliseconds=0x3e8) [0128.534] Sleep (dwMilliseconds=0x3e8) [0128.728] Sleep (dwMilliseconds=0x3e8) [0128.934] Sleep (dwMilliseconds=0x3e8) [0128.935] Sleep (dwMilliseconds=0x3e8) [0128.937] Sleep (dwMilliseconds=0x3e8) [0128.939] Sleep (dwMilliseconds=0x3e8) [0128.941] Sleep (dwMilliseconds=0x3e8) [0128.943] Sleep (dwMilliseconds=0x3e8) [0128.945] Sleep (dwMilliseconds=0x3e8) [0128.956] Sleep (dwMilliseconds=0x3e8) [0128.961] Sleep (dwMilliseconds=0x3e8) [0129.185] Sleep (dwMilliseconds=0x3e8) [0129.464] Sleep (dwMilliseconds=0x3e8) [0129.582] Sleep (dwMilliseconds=0x3e8) [0129.705] Sleep (dwMilliseconds=0x3e8) [0129.710] Sleep (dwMilliseconds=0x3e8) [0129.712] Sleep (dwMilliseconds=0x3e8) [0129.713] Sleep (dwMilliseconds=0x3e8) [0129.716] Sleep (dwMilliseconds=0x3e8) [0129.719] Sleep (dwMilliseconds=0x3e8) [0129.721] Sleep (dwMilliseconds=0x3e8) [0129.723] Sleep (dwMilliseconds=0x3e8) [0129.725] Sleep (dwMilliseconds=0x3e8) [0129.727] Sleep (dwMilliseconds=0x3e8) [0129.729] Sleep (dwMilliseconds=0x3e8) [0129.730] Sleep (dwMilliseconds=0x3e8) [0129.733] Sleep (dwMilliseconds=0x3e8) [0129.734] Sleep (dwMilliseconds=0x3e8) [0129.736] Sleep (dwMilliseconds=0x3e8) [0129.838] Sleep (dwMilliseconds=0x3e8) [0129.840] Sleep (dwMilliseconds=0x3e8) [0129.842] Sleep (dwMilliseconds=0x3e8) [0129.845] Sleep (dwMilliseconds=0x3e8) [0129.846] Sleep (dwMilliseconds=0x3e8) [0129.848] Sleep (dwMilliseconds=0x3e8) [0129.851] Sleep (dwMilliseconds=0x3e8) [0129.852] Sleep (dwMilliseconds=0x3e8) [0129.854] Sleep (dwMilliseconds=0x3e8) [0129.857] Sleep (dwMilliseconds=0x3e8) [0129.858] Sleep (dwMilliseconds=0x3e8) [0129.860] Sleep (dwMilliseconds=0x3e8) [0129.863] Sleep (dwMilliseconds=0x3e8) [0129.864] Sleep (dwMilliseconds=0x3e8) [0129.866] Sleep (dwMilliseconds=0x3e8) [0129.868] Sleep (dwMilliseconds=0x3e8) [0129.870] Sleep (dwMilliseconds=0x3e8) [0129.872] Sleep (dwMilliseconds=0x3e8) [0129.874] Sleep (dwMilliseconds=0x3e8) [0129.876] Sleep (dwMilliseconds=0x3e8) [0129.878] Sleep (dwMilliseconds=0x3e8) [0129.880] Sleep (dwMilliseconds=0x3e8) [0129.882] Sleep (dwMilliseconds=0x3e8) [0129.884] Sleep (dwMilliseconds=0x3e8) [0129.886] Sleep (dwMilliseconds=0x3e8) [0129.888] Sleep (dwMilliseconds=0x3e8) [0129.890] Sleep (dwMilliseconds=0x3e8) [0129.893] Sleep (dwMilliseconds=0x3e8) [0129.894] Sleep (dwMilliseconds=0x3e8) [0129.896] Sleep (dwMilliseconds=0x3e8) [0129.900] Sleep (dwMilliseconds=0x3e8) [0129.901] Sleep (dwMilliseconds=0x3e8) [0129.904] Sleep (dwMilliseconds=0x3e8) [0129.906] Sleep (dwMilliseconds=0x3e8) [0129.907] Sleep (dwMilliseconds=0x3e8) [0129.942] Sleep (dwMilliseconds=0x3e8) [0129.949] Sleep (dwMilliseconds=0x3e8) [0129.950] Sleep (dwMilliseconds=0x3e8) [0129.953] Sleep (dwMilliseconds=0x3e8) [0129.954] Sleep (dwMilliseconds=0x3e8) [0129.956] Sleep (dwMilliseconds=0x3e8) [0129.958] Sleep (dwMilliseconds=0x3e8) [0129.961] Sleep (dwMilliseconds=0x3e8) [0129.963] Sleep (dwMilliseconds=0x3e8) [0129.966] Sleep (dwMilliseconds=0x3e8) [0130.253] Sleep (dwMilliseconds=0x3e8) [0130.256] Sleep (dwMilliseconds=0x3e8) [0130.257] Sleep (dwMilliseconds=0x3e8) [0130.259] Sleep (dwMilliseconds=0x3e8) [0130.262] Sleep (dwMilliseconds=0x3e8) [0130.266] Sleep (dwMilliseconds=0x3e8) [0130.268] Sleep (dwMilliseconds=0x3e8) [0130.270] Sleep (dwMilliseconds=0x3e8) [0130.272] Sleep (dwMilliseconds=0x3e8) [0130.274] Sleep (dwMilliseconds=0x3e8) [0130.276] Sleep (dwMilliseconds=0x3e8) [0130.279] Sleep (dwMilliseconds=0x3e8) [0130.280] Sleep (dwMilliseconds=0x3e8) [0130.283] Sleep (dwMilliseconds=0x3e8) [0130.284] Sleep (dwMilliseconds=0x3e8) [0130.287] Sleep (dwMilliseconds=0x3e8) [0130.289] Sleep (dwMilliseconds=0x3e8) [0130.290] Sleep (dwMilliseconds=0x3e8) [0130.293] Sleep (dwMilliseconds=0x3e8) [0133.080] Sleep (dwMilliseconds=0x3e8) [0133.083] Sleep (dwMilliseconds=0x3e8) [0133.085] Sleep (dwMilliseconds=0x3e8) [0133.093] Sleep (dwMilliseconds=0x3e8) [0133.133] Sleep (dwMilliseconds=0x3e8) [0133.135] Sleep (dwMilliseconds=0x3e8) [0133.187] Sleep (dwMilliseconds=0x3e8) [0133.189] Sleep (dwMilliseconds=0x3e8) [0133.198] Sleep (dwMilliseconds=0x3e8) [0133.229] Sleep (dwMilliseconds=0x3e8) [0133.271] Sleep (dwMilliseconds=0x3e8) [0133.442] Sleep (dwMilliseconds=0x3e8) [0133.444] Sleep (dwMilliseconds=0x3e8) [0133.485] Sleep (dwMilliseconds=0x3e8) [0133.525] Sleep (dwMilliseconds=0x3e8) [0133.527] Sleep (dwMilliseconds=0x3e8) [0133.813] Sleep (dwMilliseconds=0x3e8) [0133.855] Sleep (dwMilliseconds=0x3e8) [0133.856] Sleep (dwMilliseconds=0x3e8) [0133.858] Sleep (dwMilliseconds=0x3e8) [0133.860] Sleep (dwMilliseconds=0x3e8) [0133.863] Sleep (dwMilliseconds=0x3e8) [0133.885] Sleep (dwMilliseconds=0x3e8) [0133.888] Sleep (dwMilliseconds=0x3e8) [0133.969] Sleep (dwMilliseconds=0x3e8) [0133.971] Sleep (dwMilliseconds=0x3e8) [0133.972] Sleep (dwMilliseconds=0x3e8) [0134.010] Sleep (dwMilliseconds=0x3e8) [0134.012] Sleep (dwMilliseconds=0x3e8) [0134.013] Sleep (dwMilliseconds=0x3e8) [0134.016] Sleep (dwMilliseconds=0x3e8) [0134.017] Sleep (dwMilliseconds=0x3e8) [0134.019] Sleep (dwMilliseconds=0x3e8) [0134.021] Sleep (dwMilliseconds=0x3e8) [0134.023] Sleep (dwMilliseconds=0x3e8) [0134.024] Sleep (dwMilliseconds=0x3e8) [0134.026] Sleep (dwMilliseconds=0x3e8) [0134.029] Sleep (dwMilliseconds=0x3e8) [0134.066] Sleep (dwMilliseconds=0x3e8) [0134.076] Sleep (dwMilliseconds=0x3e8) [0134.119] Sleep (dwMilliseconds=0x3e8) [0134.121] Sleep (dwMilliseconds=0x3e8) [0134.130] Sleep (dwMilliseconds=0x3e8) [0134.135] Sleep (dwMilliseconds=0x3e8) [0134.172] Sleep (dwMilliseconds=0x3e8) [0134.174] Sleep (dwMilliseconds=0x3e8) [0134.176] Sleep (dwMilliseconds=0x3e8) [0134.189] Sleep (dwMilliseconds=0x3e8) [0134.223] Sleep (dwMilliseconds=0x3e8) [0134.225] Sleep (dwMilliseconds=0x3e8) [0134.227] Sleep (dwMilliseconds=0x3e8) [0134.229] Sleep (dwMilliseconds=0x3e8) [0134.231] Sleep (dwMilliseconds=0x3e8) [0134.233] Sleep (dwMilliseconds=0x3e8) [0134.276] Sleep (dwMilliseconds=0x3e8) [0134.278] Sleep (dwMilliseconds=0x3e8) [0134.280] Sleep (dwMilliseconds=0x3e8) [0134.485] Sleep (dwMilliseconds=0x3e8) [0134.527] Sleep (dwMilliseconds=0x3e8) [0134.529] Sleep (dwMilliseconds=0x3e8) [0134.530] Sleep (dwMilliseconds=0x3e8) [0134.532] Sleep (dwMilliseconds=0x3e8) [0134.534] Sleep (dwMilliseconds=0x3e8) [0134.536] Sleep (dwMilliseconds=0x3e8) [0134.538] Sleep (dwMilliseconds=0x3e8) [0134.540] Sleep (dwMilliseconds=0x3e8) [0134.542] Sleep (dwMilliseconds=0x3e8) [0134.544] Sleep (dwMilliseconds=0x3e8) [0134.547] Sleep (dwMilliseconds=0x3e8) [0134.548] Sleep (dwMilliseconds=0x3e8) [0134.550] Sleep (dwMilliseconds=0x3e8) [0134.552] Sleep (dwMilliseconds=0x3e8) [0134.589] Sleep (dwMilliseconds=0x3e8) [0134.590] Sleep (dwMilliseconds=0x3e8) [0134.592] Sleep (dwMilliseconds=0x3e8) [0134.594] Sleep (dwMilliseconds=0x3e8) [0134.596] Sleep (dwMilliseconds=0x3e8) [0134.598] Sleep (dwMilliseconds=0x3e8) [0134.600] Sleep (dwMilliseconds=0x3e8) [0134.604] Sleep (dwMilliseconds=0x3e8) [0134.605] Sleep (dwMilliseconds=0x3e8) [0134.607] Sleep (dwMilliseconds=0x3e8) [0134.610] Sleep (dwMilliseconds=0x3e8) [0134.611] Sleep (dwMilliseconds=0x3e8) [0134.613] Sleep (dwMilliseconds=0x3e8) [0134.615] Sleep (dwMilliseconds=0x3e8) [0134.618] Sleep (dwMilliseconds=0x3e8) [0134.620] Sleep (dwMilliseconds=0x3e8) [0134.655] Sleep (dwMilliseconds=0x3e8) [0134.656] Sleep (dwMilliseconds=0x3e8) [0134.658] Sleep (dwMilliseconds=0x3e8) [0134.662] Sleep (dwMilliseconds=0x3e8) [0134.664] Sleep (dwMilliseconds=0x3e8) [0134.665] Sleep (dwMilliseconds=0x3e8) [0134.667] Sleep (dwMilliseconds=0x3e8) [0134.718] Sleep (dwMilliseconds=0x3e8) [0134.720] Sleep (dwMilliseconds=0x3e8) [0134.721] Sleep (dwMilliseconds=0x3e8) [0134.724] Sleep (dwMilliseconds=0x3e8) [0134.767] Sleep (dwMilliseconds=0x3e8) [0134.769] Sleep (dwMilliseconds=0x3e8) [0134.770] Sleep (dwMilliseconds=0x3e8) [0134.773] Sleep (dwMilliseconds=0x3e8) [0134.777] Sleep (dwMilliseconds=0x3e8) [0134.821] Sleep (dwMilliseconds=0x3e8) [0134.823] Sleep (dwMilliseconds=0x3e8) [0134.824] Sleep (dwMilliseconds=0x3e8) [0134.826] Sleep (dwMilliseconds=0x3e8) [0134.878] Sleep (dwMilliseconds=0x3e8) [0134.892] Sleep (dwMilliseconds=0x3e8) [0134.895] Sleep (dwMilliseconds=0x3e8) [0134.896] Sleep (dwMilliseconds=0x3e8) [0134.901] Sleep (dwMilliseconds=0x3e8) [0134.902] Sleep (dwMilliseconds=0x3e8) [0134.960] Sleep (dwMilliseconds=0x3e8) [0134.963] Sleep (dwMilliseconds=0x3e8) [0135.006] Sleep (dwMilliseconds=0x3e8) [0135.008] Sleep (dwMilliseconds=0x3e8) [0135.009] Sleep (dwMilliseconds=0x3e8) [0135.045] Sleep (dwMilliseconds=0x3e8) [0135.048] Sleep (dwMilliseconds=0x3e8) [0135.089] Sleep (dwMilliseconds=0x3e8) [0135.092] Sleep (dwMilliseconds=0x3e8) [0135.094] Sleep (dwMilliseconds=0x3e8) [0135.154] Sleep (dwMilliseconds=0x3e8) [0135.174] Sleep (dwMilliseconds=0x3e8) [0135.180] Sleep (dwMilliseconds=0x3e8) [0135.242] Sleep (dwMilliseconds=0x3e8) [0135.252] Sleep (dwMilliseconds=0x3e8) [0135.331] Sleep (dwMilliseconds=0x3e8) [0135.378] Sleep (dwMilliseconds=0x3e8) [0135.386] Sleep (dwMilliseconds=0x3e8) [0135.399] Sleep (dwMilliseconds=0x3e8) [0135.422] Sleep (dwMilliseconds=0x3e8) [0135.426] Sleep (dwMilliseconds=0x3e8) [0135.432] Sleep (dwMilliseconds=0x3e8) [0135.435] Sleep (dwMilliseconds=0x3e8) [0135.437] Sleep (dwMilliseconds=0x3e8) [0135.440] Sleep (dwMilliseconds=0x3e8) [0135.444] Sleep (dwMilliseconds=0x3e8) [0135.448] Sleep (dwMilliseconds=0x3e8) [0135.450] Sleep (dwMilliseconds=0x3e8) [0135.452] Sleep (dwMilliseconds=0x3e8) [0135.454] Sleep (dwMilliseconds=0x3e8) [0135.456] Sleep (dwMilliseconds=0x3e8) [0135.457] Sleep (dwMilliseconds=0x3e8) [0135.461] Sleep (dwMilliseconds=0x3e8) [0135.463] Sleep (dwMilliseconds=0x3e8) [0135.465] Sleep (dwMilliseconds=0x3e8) [0135.466] Sleep (dwMilliseconds=0x3e8) [0135.468] Sleep (dwMilliseconds=0x3e8) [0135.470] Sleep (dwMilliseconds=0x3e8) [0135.472] Sleep (dwMilliseconds=0x3e8) [0135.474] Sleep (dwMilliseconds=0x3e8) [0135.477] Sleep (dwMilliseconds=0x3e8) [0135.478] Sleep (dwMilliseconds=0x3e8) [0135.481] Sleep (dwMilliseconds=0x3e8) [0135.483] Sleep (dwMilliseconds=0x3e8) [0135.484] Sleep (dwMilliseconds=0x3e8) [0135.487] Sleep (dwMilliseconds=0x3e8) [0135.489] Sleep (dwMilliseconds=0x3e8) [0135.491] Sleep (dwMilliseconds=0x3e8) [0135.493] Sleep (dwMilliseconds=0x3e8) [0135.494] Sleep (dwMilliseconds=0x3e8) [0135.498] Sleep (dwMilliseconds=0x3e8) [0135.501] Sleep (dwMilliseconds=0x3e8) [0135.504] Sleep (dwMilliseconds=0x3e8) [0135.506] Sleep (dwMilliseconds=0x3e8) [0135.508] Sleep (dwMilliseconds=0x3e8) [0135.512] Sleep (dwMilliseconds=0x3e8) [0135.514] Sleep (dwMilliseconds=0x3e8) [0135.524] Sleep (dwMilliseconds=0x3e8) [0135.526] Sleep (dwMilliseconds=0x3e8) [0135.527] Sleep (dwMilliseconds=0x3e8) [0135.532] Sleep (dwMilliseconds=0x3e8) [0135.535] Sleep (dwMilliseconds=0x3e8) [0135.537] Sleep (dwMilliseconds=0x3e8) [0135.539] Sleep (dwMilliseconds=0x3e8) [0135.540] Sleep (dwMilliseconds=0x3e8) [0135.542] Sleep (dwMilliseconds=0x3e8) [0135.545] Sleep (dwMilliseconds=0x3e8) [0135.546] Sleep (dwMilliseconds=0x3e8) [0135.574] Sleep (dwMilliseconds=0x3e8) [0135.576] Sleep (dwMilliseconds=0x3e8) [0135.579] Sleep (dwMilliseconds=0x3e8) [0135.582] Sleep (dwMilliseconds=0x3e8) [0135.584] Sleep (dwMilliseconds=0x3e8) [0135.588] Sleep (dwMilliseconds=0x3e8) [0135.590] Sleep (dwMilliseconds=0x3e8) [0135.591] Sleep (dwMilliseconds=0x3e8) [0135.594] Sleep (dwMilliseconds=0x3e8) [0135.596] Sleep (dwMilliseconds=0x3e8) [0135.601] Sleep (dwMilliseconds=0x3e8) [0135.603] Sleep (dwMilliseconds=0x3e8) [0135.610] Sleep (dwMilliseconds=0x3e8) [0135.615] Sleep (dwMilliseconds=0x3e8) [0135.620] Sleep (dwMilliseconds=0x3e8) [0135.624] Sleep (dwMilliseconds=0x3e8) [0135.628] Sleep (dwMilliseconds=0x3e8) [0135.631] Sleep (dwMilliseconds=0x3e8) [0135.632] Sleep (dwMilliseconds=0x3e8) [0135.637] Sleep (dwMilliseconds=0x3e8) [0135.638] Sleep (dwMilliseconds=0x3e8) [0135.641] Sleep (dwMilliseconds=0x3e8) [0135.645] Sleep (dwMilliseconds=0x3e8) [0135.648] Sleep (dwMilliseconds=0x3e8) [0135.650] Sleep (dwMilliseconds=0x3e8) [0135.651] Sleep (dwMilliseconds=0x3e8) [0135.699] Sleep (dwMilliseconds=0x3e8) [0135.715] Sleep (dwMilliseconds=0x3e8) [0135.724] Sleep (dwMilliseconds=0x3e8) [0135.728] Sleep (dwMilliseconds=0x3e8) [0135.743] Sleep (dwMilliseconds=0x3e8) [0135.746] Sleep (dwMilliseconds=0x3e8) [0135.756] Sleep (dwMilliseconds=0x3e8) [0135.759] Sleep (dwMilliseconds=0x3e8) [0135.763] Sleep (dwMilliseconds=0x3e8) [0135.764] Sleep (dwMilliseconds=0x3e8) [0135.770] Sleep (dwMilliseconds=0x3e8) [0135.771] Sleep (dwMilliseconds=0x3e8) [0135.773] Sleep (dwMilliseconds=0x3e8) [0135.777] Sleep (dwMilliseconds=0x3e8) [0135.779] Sleep (dwMilliseconds=0x3e8) [0135.781] Sleep (dwMilliseconds=0x3e8) [0135.792] Sleep (dwMilliseconds=0x3e8) [0135.798] Sleep (dwMilliseconds=0x3e8) [0135.801] Sleep (dwMilliseconds=0x3e8) [0135.810] Sleep (dwMilliseconds=0x3e8) [0135.814] Sleep (dwMilliseconds=0x3e8) [0135.821] Sleep (dwMilliseconds=0x3e8) [0135.911] Sleep (dwMilliseconds=0x3e8) [0135.913] Sleep (dwMilliseconds=0x3e8) [0135.954] Sleep (dwMilliseconds=0x3e8) [0135.959] Sleep (dwMilliseconds=0x3e8) [0135.962] Sleep (dwMilliseconds=0x3e8) [0135.964] Sleep (dwMilliseconds=0x3e8) [0135.969] Sleep (dwMilliseconds=0x3e8) [0135.971] Sleep (dwMilliseconds=0x3e8) [0135.973] Sleep (dwMilliseconds=0x3e8) [0136.019] Sleep (dwMilliseconds=0x3e8) [0136.022] Sleep (dwMilliseconds=0x3e8) [0136.025] Sleep (dwMilliseconds=0x3e8) [0136.027] Sleep (dwMilliseconds=0x3e8) [0136.077] Sleep (dwMilliseconds=0x3e8) [0136.081] Sleep (dwMilliseconds=0x3e8) [0136.087] Sleep (dwMilliseconds=0x3e8) [0136.151] Sleep (dwMilliseconds=0x3e8) [0136.155] Sleep (dwMilliseconds=0x3e8) [0136.161] Sleep (dwMilliseconds=0x3e8) [0136.169] Sleep (dwMilliseconds=0x3e8) [0136.173] Sleep (dwMilliseconds=0x3e8) [0136.176] Sleep (dwMilliseconds=0x3e8) [0136.179] Sleep (dwMilliseconds=0x3e8) [0136.180] Sleep (dwMilliseconds=0x3e8) [0136.184] Sleep (dwMilliseconds=0x3e8) [0136.197] Sleep (dwMilliseconds=0x3e8) [0136.201] Sleep (dwMilliseconds=0x3e8) [0137.879] Sleep (dwMilliseconds=0x3e8) [0137.881] Sleep (dwMilliseconds=0x3e8) [0137.939] Sleep (dwMilliseconds=0x3e8) [0137.940] Sleep (dwMilliseconds=0x3e8) [0137.943] Sleep (dwMilliseconds=0x3e8) [0137.944] Sleep (dwMilliseconds=0x3e8) [0137.948] Sleep (dwMilliseconds=0x3e8) [0137.950] Sleep (dwMilliseconds=0x3e8) [0137.952] Sleep (dwMilliseconds=0x3e8) [0137.953] Sleep (dwMilliseconds=0x3e8) [0137.957] Sleep (dwMilliseconds=0x3e8) [0138.001] Sleep (dwMilliseconds=0x3e8) [0138.003] Sleep (dwMilliseconds=0x3e8) [0138.006] Sleep (dwMilliseconds=0x3e8) [0138.007] Sleep (dwMilliseconds=0x3e8) [0138.052] Sleep (dwMilliseconds=0x3e8) [0138.054] Sleep (dwMilliseconds=0x3e8) [0138.100] Sleep (dwMilliseconds=0x3e8) [0138.102] Sleep (dwMilliseconds=0x3e8) [0138.139] Sleep (dwMilliseconds=0x3e8) [0138.141] Sleep (dwMilliseconds=0x3e8) [0138.143] Sleep (dwMilliseconds=0x3e8) [0138.145] Sleep (dwMilliseconds=0x3e8) [0138.146] Sleep (dwMilliseconds=0x3e8) [0138.187] Sleep (dwMilliseconds=0x3e8) [0138.189] Sleep (dwMilliseconds=0x3e8) [0138.191] Sleep (dwMilliseconds=0x3e8) [0138.233] Sleep (dwMilliseconds=0x3e8) [0138.235] Sleep (dwMilliseconds=0x3e8) [0138.237] Sleep (dwMilliseconds=0x3e8) [0138.284] Sleep (dwMilliseconds=0x3e8) [0138.286] Sleep (dwMilliseconds=0x3e8) [0138.293] Sleep (dwMilliseconds=0x3e8) [0138.336] Sleep (dwMilliseconds=0x3e8) [0138.338] Sleep (dwMilliseconds=0x3e8) [0138.340] Sleep (dwMilliseconds=0x3e8) [0138.391] Sleep (dwMilliseconds=0x3e8) [0138.393] Sleep (dwMilliseconds=0x3e8) [0138.443] Sleep (dwMilliseconds=0x3e8) [0138.446] Sleep (dwMilliseconds=0x3e8) [0138.448] Sleep (dwMilliseconds=0x3e8) [0138.450] Sleep (dwMilliseconds=0x3e8) [0138.452] Sleep (dwMilliseconds=0x3e8) [0138.502] Sleep (dwMilliseconds=0x3e8) [0138.504] Sleep (dwMilliseconds=0x3e8) [0138.506] Sleep (dwMilliseconds=0x3e8) [0138.508] Sleep (dwMilliseconds=0x3e8) [0138.509] Sleep (dwMilliseconds=0x3e8) [0138.511] Sleep (dwMilliseconds=0x3e8) [0138.513] Sleep (dwMilliseconds=0x3e8) [0138.517] Sleep (dwMilliseconds=0x3e8) [0138.518] Sleep (dwMilliseconds=0x3e8) [0138.520] Sleep (dwMilliseconds=0x3e8) [0138.523] Sleep (dwMilliseconds=0x3e8) [0138.525] Sleep (dwMilliseconds=0x3e8) [0138.526] Sleep (dwMilliseconds=0x3e8) [0138.539] Sleep (dwMilliseconds=0x3e8) [0138.540] Sleep (dwMilliseconds=0x3e8) [0138.542] Sleep (dwMilliseconds=0x3e8) [0138.545] Sleep (dwMilliseconds=0x3e8) [0138.547] Sleep (dwMilliseconds=0x3e8) [0138.549] Sleep (dwMilliseconds=0x3e8) [0138.551] Sleep (dwMilliseconds=0x3e8) [0138.554] Sleep (dwMilliseconds=0x3e8) [0138.555] Sleep (dwMilliseconds=0x3e8) [0138.557] Sleep (dwMilliseconds=0x3e8) [0138.559] Sleep (dwMilliseconds=0x3e8) [0138.561] Sleep (dwMilliseconds=0x3e8) [0138.563] Sleep (dwMilliseconds=0x3e8) [0138.565] Sleep (dwMilliseconds=0x3e8) [0138.567] Sleep (dwMilliseconds=0x3e8) [0138.571] Sleep (dwMilliseconds=0x3e8) [0138.574] Sleep (dwMilliseconds=0x3e8) [0138.576] Sleep (dwMilliseconds=0x3e8) [0138.577] Sleep (dwMilliseconds=0x3e8) [0138.580] Sleep (dwMilliseconds=0x3e8) [0138.582] Sleep (dwMilliseconds=0x3e8) [0138.588] Sleep (dwMilliseconds=0x3e8) [0138.590] Sleep (dwMilliseconds=0x3e8) [0138.593] Sleep (dwMilliseconds=0x3e8) [0138.595] Sleep (dwMilliseconds=0x3e8) [0138.597] Sleep (dwMilliseconds=0x3e8) [0138.598] Sleep (dwMilliseconds=0x3e8) [0138.601] Sleep (dwMilliseconds=0x3e8) [0138.604] Sleep (dwMilliseconds=0x3e8) [0138.605] Sleep (dwMilliseconds=0x3e8) [0138.608] Sleep (dwMilliseconds=0x3e8) [0138.610] Sleep (dwMilliseconds=0x3e8) [0138.613] Sleep (dwMilliseconds=0x3e8) [0138.617] Sleep (dwMilliseconds=0x3e8) [0138.619] Sleep (dwMilliseconds=0x3e8) [0138.620] Sleep (dwMilliseconds=0x3e8) [0138.623] Sleep (dwMilliseconds=0x3e8) [0138.626] Sleep (dwMilliseconds=0x3e8) [0138.704] Sleep (dwMilliseconds=0x3e8) [0138.706] Sleep (dwMilliseconds=0x3e8) [0138.708] Sleep (dwMilliseconds=0x3e8) [0138.710] Sleep (dwMilliseconds=0x3e8) [0138.713] Sleep (dwMilliseconds=0x3e8) [0138.715] Sleep (dwMilliseconds=0x3e8) [0138.717] Sleep (dwMilliseconds=0x3e8) [0138.718] Sleep (dwMilliseconds=0x3e8) [0138.719] Sleep (dwMilliseconds=0x3e8) [0138.723] Sleep (dwMilliseconds=0x3e8) [0139.204] Sleep (dwMilliseconds=0x3e8) [0139.205] Sleep (dwMilliseconds=0x3e8) [0139.207] Sleep (dwMilliseconds=0x3e8) [0139.208] Sleep (dwMilliseconds=0x3e8) [0139.210] Sleep (dwMilliseconds=0x3e8) [0139.212] Sleep (dwMilliseconds=0x3e8) [0139.219] Sleep (dwMilliseconds=0x3e8) [0139.221] Sleep (dwMilliseconds=0x3e8) [0139.223] Sleep (dwMilliseconds=0x3e8) [0139.224] Sleep (dwMilliseconds=0x3e8) [0139.226] Sleep (dwMilliseconds=0x3e8) [0139.227] Sleep (dwMilliseconds=0x3e8) [0139.229] Sleep (dwMilliseconds=0x3e8) [0139.231] Sleep (dwMilliseconds=0x3e8) [0139.233] Sleep (dwMilliseconds=0x3e8) [0139.234] Sleep (dwMilliseconds=0x3e8) [0139.239] Sleep (dwMilliseconds=0x3e8) [0139.241] Sleep (dwMilliseconds=0x3e8) [0139.243] Sleep (dwMilliseconds=0x3e8) [0139.245] Sleep (dwMilliseconds=0x3e8) [0139.246] Sleep (dwMilliseconds=0x3e8) [0139.249] Sleep (dwMilliseconds=0x3e8) [0139.250] Sleep (dwMilliseconds=0x3e8) [0139.256] Sleep (dwMilliseconds=0x3e8) [0139.307] Sleep (dwMilliseconds=0x3e8) [0139.310] Sleep (dwMilliseconds=0x3e8) [0139.312] Sleep (dwMilliseconds=0x3e8) [0139.314] Sleep (dwMilliseconds=0x3e8) [0139.315] Sleep (dwMilliseconds=0x3e8) [0139.329] Sleep (dwMilliseconds=0x3e8) [0139.373] Sleep (dwMilliseconds=0x3e8) [0139.374] Sleep (dwMilliseconds=0x3e8) [0139.377] Sleep (dwMilliseconds=0x3e8) [0139.382] Sleep (dwMilliseconds=0x3e8) [0140.002] Sleep (dwMilliseconds=0x3e8) [0140.003] Sleep (dwMilliseconds=0x3e8) [0140.005] Sleep (dwMilliseconds=0x3e8) [0140.008] Sleep (dwMilliseconds=0x3e8) [0140.009] Sleep (dwMilliseconds=0x3e8) [0140.011] Sleep (dwMilliseconds=0x3e8) [0140.016] Sleep (dwMilliseconds=0x3e8) [0140.017] Sleep (dwMilliseconds=0x3e8) [0140.019] Sleep (dwMilliseconds=0x3e8) [0140.021] Sleep (dwMilliseconds=0x3e8) [0140.024] Sleep (dwMilliseconds=0x3e8) [0140.025] Sleep (dwMilliseconds=0x3e8) [0140.071] Sleep (dwMilliseconds=0x3e8) [0140.074] Sleep (dwMilliseconds=0x3e8) [0140.075] Sleep (dwMilliseconds=0x3e8) [0140.080] Sleep (dwMilliseconds=0x3e8) [0140.124] Sleep (dwMilliseconds=0x3e8) [0140.127] Sleep (dwMilliseconds=0x3e8) [0140.128] Sleep (dwMilliseconds=0x3e8) [0140.131] Sleep (dwMilliseconds=0x3e8) [0140.133] Sleep (dwMilliseconds=0x3e8) [0140.134] Sleep (dwMilliseconds=0x3e8) [0140.140] Sleep (dwMilliseconds=0x3e8) [0140.195] Sleep (dwMilliseconds=0x3e8) [0140.197] Sleep (dwMilliseconds=0x3e8) [0140.198] Sleep (dwMilliseconds=0x3e8) [0140.200] Sleep (dwMilliseconds=0x3e8) [0140.202] Sleep (dwMilliseconds=0x3e8) [0140.252] Sleep (dwMilliseconds=0x3e8) [0140.253] Sleep (dwMilliseconds=0x3e8) [0140.255] Sleep (dwMilliseconds=0x3e8) [0140.258] Sleep (dwMilliseconds=0x3e8) [0140.266] Sleep (dwMilliseconds=0x3e8) [0140.305] Sleep (dwMilliseconds=0x3e8) [0140.315] Sleep (dwMilliseconds=0x3e8) [0140.320] Sleep (dwMilliseconds=0x3e8) [0140.321] Sleep (dwMilliseconds=0x3e8) [0140.363] Sleep (dwMilliseconds=0x3e8) [0140.365] Sleep (dwMilliseconds=0x3e8) [0140.366] Sleep (dwMilliseconds=0x3e8) [0140.368] Sleep (dwMilliseconds=0x3e8) [0140.371] Sleep (dwMilliseconds=0x3e8) [0140.372] Sleep (dwMilliseconds=0x3e8) [0140.376] Sleep (dwMilliseconds=0x3e8) [0140.380] Sleep (dwMilliseconds=0x3e8) [0140.503] Sleep (dwMilliseconds=0x3e8) [0140.505] Sleep (dwMilliseconds=0x3e8) [0140.506] Sleep (dwMilliseconds=0x3e8) [0140.508] Sleep (dwMilliseconds=0x3e8) [0140.510] Sleep (dwMilliseconds=0x3e8) [0140.515] Sleep (dwMilliseconds=0x3e8) [0140.518] Sleep (dwMilliseconds=0x3e8) [0140.519] Sleep (dwMilliseconds=0x3e8) [0140.521] Sleep (dwMilliseconds=0x3e8) [0140.524] Sleep (dwMilliseconds=0x3e8) [0140.528] Sleep (dwMilliseconds=0x3e8) [0140.529] Sleep (dwMilliseconds=0x3e8) [0140.532] Sleep (dwMilliseconds=0x3e8) [0140.533] Sleep (dwMilliseconds=0x3e8) [0140.538] Sleep (dwMilliseconds=0x3e8) [0140.542] Sleep (dwMilliseconds=0x3e8) [0140.544] Sleep (dwMilliseconds=0x3e8) [0140.547] Sleep (dwMilliseconds=0x3e8) [0140.549] Sleep (dwMilliseconds=0x3e8) [0140.596] Sleep (dwMilliseconds=0x3e8) [0140.598] Sleep (dwMilliseconds=0x3e8) [0140.602] Sleep (dwMilliseconds=0x3e8) [0140.604] Sleep (dwMilliseconds=0x3e8) [0140.605] Sleep (dwMilliseconds=0x3e8) [0140.608] Sleep (dwMilliseconds=0x3e8) [0140.609] Sleep (dwMilliseconds=0x3e8) [0140.611] Sleep (dwMilliseconds=0x3e8) [0140.645] Sleep (dwMilliseconds=0x3e8) [0140.646] Sleep (dwMilliseconds=0x3e8) [0140.649] Sleep (dwMilliseconds=0x3e8) [0141.389] Sleep (dwMilliseconds=0x3e8) [0141.441] Sleep (dwMilliseconds=0x3e8) [0141.448] Sleep (dwMilliseconds=0x3e8) [0141.501] Sleep (dwMilliseconds=0x3e8) [0141.508] Sleep (dwMilliseconds=0x3e8) [0141.512] Sleep (dwMilliseconds=0x3e8) [0141.517] Sleep (dwMilliseconds=0x3e8) [0141.564] Sleep (dwMilliseconds=0x3e8) [0141.570] Sleep (dwMilliseconds=0x3e8) [0141.636] Sleep (dwMilliseconds=0x3e8) [0141.642] Sleep (dwMilliseconds=0x3e8) [0141.697] Sleep (dwMilliseconds=0x3e8) [0141.702] Sleep (dwMilliseconds=0x3e8) [0141.762] Sleep (dwMilliseconds=0x3e8) [0141.766] Sleep (dwMilliseconds=0x3e8) [0141.769] Sleep (dwMilliseconds=0x3e8) [0141.827] Sleep (dwMilliseconds=0x3e8) [0141.834] Sleep (dwMilliseconds=0x3e8) [0141.838] Sleep (dwMilliseconds=0x3e8) [0141.915] Sleep (dwMilliseconds=0x3e8) [0141.922] Sleep (dwMilliseconds=0x3e8) [0141.924] Sleep (dwMilliseconds=0x3e8) [0142.009] Sleep (dwMilliseconds=0x3e8) [0142.024] Sleep (dwMilliseconds=0x3e8) [0142.034] Sleep (dwMilliseconds=0x3e8) [0142.038] Sleep (dwMilliseconds=0x3e8) [0142.045] Sleep (dwMilliseconds=0x3e8) [0142.047] Sleep (dwMilliseconds=0x3e8) [0142.098] Sleep (dwMilliseconds=0x3e8) [0142.101] Sleep (dwMilliseconds=0x3e8) [0142.110] Sleep (dwMilliseconds=0x3e8) [0142.111] Sleep (dwMilliseconds=0x3e8) [0142.183] Sleep (dwMilliseconds=0x3e8) [0142.188] Sleep (dwMilliseconds=0x3e8) [0142.192] Sleep (dwMilliseconds=0x3e8) [0142.194] Sleep (dwMilliseconds=0x3e8) [0142.197] Sleep (dwMilliseconds=0x3e8) [0142.259] Sleep (dwMilliseconds=0x3e8) [0142.270] Sleep (dwMilliseconds=0x3e8) [0142.348] Sleep (dwMilliseconds=0x3e8) [0142.350] Sleep (dwMilliseconds=0x3e8) [0142.355] Sleep (dwMilliseconds=0x3e8) [0142.365] Sleep (dwMilliseconds=0x3e8) [0142.479] Sleep (dwMilliseconds=0x3e8) [0142.483] Sleep (dwMilliseconds=0x3e8) [0142.501] Sleep (dwMilliseconds=0x3e8) [0142.504] Sleep (dwMilliseconds=0x3e8) [0142.512] Sleep (dwMilliseconds=0x3e8) [0142.527] Sleep (dwMilliseconds=0x3e8) [0142.531] Sleep (dwMilliseconds=0x3e8) [0142.587] Sleep (dwMilliseconds=0x3e8) [0142.602] Sleep (dwMilliseconds=0x3e8) [0142.604] Sleep (dwMilliseconds=0x3e8) [0142.605] Sleep (dwMilliseconds=0x3e8) [0142.607] Sleep (dwMilliseconds=0x3e8) [0142.609] Sleep (dwMilliseconds=0x3e8) [0142.619] Sleep (dwMilliseconds=0x3e8) [0142.622] Sleep (dwMilliseconds=0x3e8) [0142.630] Sleep (dwMilliseconds=0x3e8) [0142.636] Sleep (dwMilliseconds=0x3e8) [0142.640] Sleep (dwMilliseconds=0x3e8) [0142.647] Sleep (dwMilliseconds=0x3e8) [0142.649] Sleep (dwMilliseconds=0x3e8) [0142.654] Sleep (dwMilliseconds=0x3e8) [0142.656] Sleep (dwMilliseconds=0x3e8) [0142.657] Sleep (dwMilliseconds=0x3e8) [0142.659] Sleep (dwMilliseconds=0x3e8) [0142.662] Sleep (dwMilliseconds=0x3e8) [0142.666] Sleep (dwMilliseconds=0x3e8) [0142.669] Sleep (dwMilliseconds=0x3e8) [0142.717] Sleep (dwMilliseconds=0x3e8) [0142.722] Sleep (dwMilliseconds=0x3e8) [0142.764] Sleep (dwMilliseconds=0x3e8) [0142.907] Sleep (dwMilliseconds=0x3e8) [0142.952] Sleep (dwMilliseconds=0x3e8) [0142.974] Sleep (dwMilliseconds=0x3e8) [0142.977] Sleep (dwMilliseconds=0x3e8) [0142.978] Sleep (dwMilliseconds=0x3e8) [0142.981] Sleep (dwMilliseconds=0x3e8) [0142.986] Sleep (dwMilliseconds=0x3e8) [0143.007] Sleep (dwMilliseconds=0x3e8) [0143.053] Sleep (dwMilliseconds=0x3e8) [0143.088] Sleep (dwMilliseconds=0x3e8) [0143.116] Sleep (dwMilliseconds=0x3e8) [0143.131] Sleep (dwMilliseconds=0x3e8) [0143.134] Sleep (dwMilliseconds=0x3e8) [0143.141] Sleep (dwMilliseconds=0x3e8) [0143.219] Sleep (dwMilliseconds=0x3e8) [0144.830] Sleep (dwMilliseconds=0x3e8) [0144.926] Sleep (dwMilliseconds=0x3e8) [0144.932] Sleep (dwMilliseconds=0x3e8) [0144.987] Sleep (dwMilliseconds=0x3e8) [0144.992] Sleep (dwMilliseconds=0x3e8) [0144.994] Sleep (dwMilliseconds=0x3e8) [0144.996] Sleep (dwMilliseconds=0x3e8) [0144.997] Sleep (dwMilliseconds=0x3e8) [0145.000] Sleep (dwMilliseconds=0x3e8) [0145.001] Sleep (dwMilliseconds=0x3e8) [0145.004] Sleep (dwMilliseconds=0x3e8) [0145.029] Sleep (dwMilliseconds=0x3e8) [0145.198] Sleep (dwMilliseconds=0x3e8) [0145.201] Sleep (dwMilliseconds=0x3e8) [0145.205] Sleep (dwMilliseconds=0x3e8) [0145.215] Sleep (dwMilliseconds=0x3e8) [0145.270] Sleep (dwMilliseconds=0x3e8) [0145.275] Sleep (dwMilliseconds=0x3e8) [0145.320] Sleep (dwMilliseconds=0x3e8) [0145.325] Sleep (dwMilliseconds=0x3e8) [0145.408] Sleep (dwMilliseconds=0x3e8) [0145.413] Sleep (dwMilliseconds=0x3e8) [0145.460] Sleep (dwMilliseconds=0x3e8) [0145.477] Sleep (dwMilliseconds=0x3e8) [0145.479] Sleep (dwMilliseconds=0x3e8) [0145.577] Sleep (dwMilliseconds=0x3e8) [0145.579] Sleep (dwMilliseconds=0x3e8) [0145.581] Sleep (dwMilliseconds=0x3e8) [0145.583] Sleep (dwMilliseconds=0x3e8) [0145.584] Sleep (dwMilliseconds=0x3e8) [0145.589] Sleep (dwMilliseconds=0x3e8) [0145.591] Sleep (dwMilliseconds=0x3e8) [0145.594] Sleep (dwMilliseconds=0x3e8) [0145.595] Sleep (dwMilliseconds=0x3e8) [0145.597] Sleep (dwMilliseconds=0x3e8) [0145.616] Sleep (dwMilliseconds=0x3e8) [0145.618] Sleep (dwMilliseconds=0x3e8) [0145.622] Sleep (dwMilliseconds=0x3e8) [0145.623] Sleep (dwMilliseconds=0x3e8) [0145.640] Sleep (dwMilliseconds=0x3e8) [0145.642] Sleep (dwMilliseconds=0x3e8) [0145.643] Sleep (dwMilliseconds=0x3e8) [0145.646] Sleep (dwMilliseconds=0x3e8) [0145.648] Sleep (dwMilliseconds=0x3e8) [0145.650] Sleep (dwMilliseconds=0x3e8) [0145.810] Sleep (dwMilliseconds=0x3e8) [0145.812] Sleep (dwMilliseconds=0x3e8) [0145.816] Sleep (dwMilliseconds=0x3e8) [0145.824] Sleep (dwMilliseconds=0x3e8) [0146.095] Sleep (dwMilliseconds=0x3e8) [0146.099] Sleep (dwMilliseconds=0x3e8) [0146.109] Sleep (dwMilliseconds=0x3e8) [0146.112] Sleep (dwMilliseconds=0x3e8) [0146.116] Sleep (dwMilliseconds=0x3e8) [0146.118] Sleep (dwMilliseconds=0x3e8) [0146.122] Sleep (dwMilliseconds=0x3e8) [0146.124] Sleep (dwMilliseconds=0x3e8) [0146.128] Sleep (dwMilliseconds=0x3e8) [0146.130] Sleep (dwMilliseconds=0x3e8) [0146.136] Sleep (dwMilliseconds=0x3e8) [0146.138] Sleep (dwMilliseconds=0x3e8) [0146.141] Sleep (dwMilliseconds=0x3e8) [0146.143] Sleep (dwMilliseconds=0x3e8) [0146.148] Sleep (dwMilliseconds=0x3e8) [0146.160] Sleep (dwMilliseconds=0x3e8) [0146.167] Sleep (dwMilliseconds=0x3e8) [0146.181] Sleep (dwMilliseconds=0x3e8) [0146.230] Sleep (dwMilliseconds=0x3e8) [0146.233] Sleep (dwMilliseconds=0x3e8) [0146.235] Sleep (dwMilliseconds=0x3e8) [0146.245] Sleep (dwMilliseconds=0x3e8) [0146.246] Sleep (dwMilliseconds=0x3e8) [0146.251] Sleep (dwMilliseconds=0x3e8) [0146.255] Sleep (dwMilliseconds=0x3e8) [0146.259] Sleep (dwMilliseconds=0x3e8) [0146.265] Sleep (dwMilliseconds=0x3e8) [0146.269] Sleep (dwMilliseconds=0x3e8) [0146.273] Sleep (dwMilliseconds=0x3e8) [0146.318] Sleep (dwMilliseconds=0x3e8) [0146.323] Sleep (dwMilliseconds=0x3e8) [0146.362] Sleep (dwMilliseconds=0x3e8) [0146.365] Sleep (dwMilliseconds=0x3e8) [0146.407] Sleep (dwMilliseconds=0x3e8) [0146.409] Sleep (dwMilliseconds=0x3e8) [0146.411] Sleep (dwMilliseconds=0x3e8) [0146.454] Sleep (dwMilliseconds=0x3e8) [0146.456] Sleep (dwMilliseconds=0x3e8) [0146.458] Sleep (dwMilliseconds=0x3e8) [0146.504] Sleep (dwMilliseconds=0x3e8) [0146.507] Sleep (dwMilliseconds=0x3e8) [0146.512] Sleep (dwMilliseconds=0x3e8) [0146.513] Sleep (dwMilliseconds=0x3e8) [0146.515] Sleep (dwMilliseconds=0x3e8) [0146.518] Sleep (dwMilliseconds=0x3e8) [0146.520] Sleep (dwMilliseconds=0x3e8) [0146.521] Sleep (dwMilliseconds=0x3e8) [0146.523] Sleep (dwMilliseconds=0x3e8) [0146.526] Sleep (dwMilliseconds=0x3e8) [0146.527] Sleep (dwMilliseconds=0x3e8) [0146.530] Sleep (dwMilliseconds=0x3e8) [0146.532] Sleep (dwMilliseconds=0x3e8) [0146.533] Sleep (dwMilliseconds=0x3e8) [0146.535] Sleep (dwMilliseconds=0x3e8) [0146.537] Sleep (dwMilliseconds=0x3e8) [0146.540] Sleep (dwMilliseconds=0x3e8) [0146.541] Sleep (dwMilliseconds=0x3e8) [0146.544] Sleep (dwMilliseconds=0x3e8) [0146.546] Sleep (dwMilliseconds=0x3e8) [0146.547] Sleep (dwMilliseconds=0x3e8) [0146.551] Sleep (dwMilliseconds=0x3e8) [0146.552] Sleep (dwMilliseconds=0x3e8) [0146.554] Sleep (dwMilliseconds=0x3e8) [0146.621] Sleep (dwMilliseconds=0x3e8) [0146.623] Sleep (dwMilliseconds=0x3e8) [0146.624] Sleep (dwMilliseconds=0x3e8) [0146.626] Sleep (dwMilliseconds=0x3e8) [0146.628] Sleep (dwMilliseconds=0x3e8) [0146.631] Sleep (dwMilliseconds=0x3e8) [0146.677] Sleep (dwMilliseconds=0x3e8) [0146.683] Sleep (dwMilliseconds=0x3e8) [0146.699] Sleep (dwMilliseconds=0x3e8) [0146.710] Sleep (dwMilliseconds=0x3e8) [0146.717] Sleep (dwMilliseconds=0x3e8) [0146.723] Sleep (dwMilliseconds=0x3e8) [0146.793] Sleep (dwMilliseconds=0x3e8) [0146.795] Sleep (dwMilliseconds=0x3e8) [0146.797] Sleep (dwMilliseconds=0x3e8) [0146.798] Sleep (dwMilliseconds=0x3e8) [0146.801] Sleep (dwMilliseconds=0x3e8) [0146.803] Sleep (dwMilliseconds=0x3e8) [0146.805] Sleep (dwMilliseconds=0x3e8) [0146.813] Sleep (dwMilliseconds=0x3e8) [0146.815] Sleep (dwMilliseconds=0x3e8) [0146.818] Sleep (dwMilliseconds=0x3e8) [0146.819] Sleep (dwMilliseconds=0x3e8) [0146.863] Sleep (dwMilliseconds=0x3e8) [0146.868] Sleep (dwMilliseconds=0x3e8) [0146.871] Sleep (dwMilliseconds=0x3e8) [0146.872] Sleep (dwMilliseconds=0x3e8) [0146.916] Sleep (dwMilliseconds=0x3e8) [0146.919] Sleep (dwMilliseconds=0x3e8) [0146.920] Sleep (dwMilliseconds=0x3e8) [0146.922] Sleep (dwMilliseconds=0x3e8) [0146.964] Sleep (dwMilliseconds=0x3e8) [0146.967] Sleep (dwMilliseconds=0x3e8) [0147.331] Sleep (dwMilliseconds=0x3e8) [0147.371] Sleep (dwMilliseconds=0x3e8) [0147.373] Sleep (dwMilliseconds=0x3e8) [0147.375] Sleep (dwMilliseconds=0x3e8) [0147.438] Sleep (dwMilliseconds=0x3e8) [0147.440] Sleep (dwMilliseconds=0x3e8) [0147.441] Sleep (dwMilliseconds=0x3e8) [0147.443] Sleep (dwMilliseconds=0x3e8) [0147.448] Sleep (dwMilliseconds=0x3e8) [0147.450] Sleep (dwMilliseconds=0x3e8) [0147.451] Sleep (dwMilliseconds=0x3e8) [0147.454] Sleep (dwMilliseconds=0x3e8) [0147.456] Sleep (dwMilliseconds=0x3e8) [0147.457] Sleep (dwMilliseconds=0x3e8) [0147.460] Sleep (dwMilliseconds=0x3e8) [0147.461] Sleep (dwMilliseconds=0x3e8) [0147.463] Sleep (dwMilliseconds=0x3e8) [0147.506] Sleep (dwMilliseconds=0x3e8) [0147.640] Sleep (dwMilliseconds=0x3e8) [0147.683] Sleep (dwMilliseconds=0x3e8) [0147.684] Sleep (dwMilliseconds=0x3e8) [0147.686] Sleep (dwMilliseconds=0x3e8) [0147.689] Sleep (dwMilliseconds=0x3e8) [0147.690] Sleep (dwMilliseconds=0x3e8) [0147.692] Sleep (dwMilliseconds=0x3e8) [0147.694] Sleep (dwMilliseconds=0x3e8) [0147.696] Sleep (dwMilliseconds=0x3e8) [0147.704] Sleep (dwMilliseconds=0x3e8) [0147.743] Sleep (dwMilliseconds=0x3e8) [0147.746] Sleep (dwMilliseconds=0x3e8) [0147.747] Sleep (dwMilliseconds=0x3e8) [0147.793] Sleep (dwMilliseconds=0x3e8) [0147.796] Sleep (dwMilliseconds=0x3e8) [0147.798] Sleep (dwMilliseconds=0x3e8) [0147.805] Sleep (dwMilliseconds=0x3e8) [0147.853] Sleep (dwMilliseconds=0x3e8) [0147.858] Sleep (dwMilliseconds=0x3e8) [0147.860] Sleep (dwMilliseconds=0x3e8) [0147.862] Sleep (dwMilliseconds=0x3e8) [0147.865] Sleep (dwMilliseconds=0x3e8) [0147.867] Sleep (dwMilliseconds=0x3e8) [0147.870] Sleep (dwMilliseconds=0x3e8) [0147.910] Sleep (dwMilliseconds=0x3e8) [0147.913] Sleep (dwMilliseconds=0x3e8) [0147.915] Sleep (dwMilliseconds=0x3e8) [0147.916] Sleep (dwMilliseconds=0x3e8) [0147.920] Sleep (dwMilliseconds=0x3e8) [0147.930] Sleep (dwMilliseconds=0x3e8) [0147.938] Sleep (dwMilliseconds=0x3e8) [0147.995] Sleep (dwMilliseconds=0x3e8) [0148.000] Sleep (dwMilliseconds=0x3e8) [0148.049] Sleep (dwMilliseconds=0x3e8) [0148.051] Sleep (dwMilliseconds=0x3e8) [0148.089] Sleep (dwMilliseconds=0x3e8) [0148.092] Sleep (dwMilliseconds=0x3e8) [0148.094] Sleep (dwMilliseconds=0x3e8) [0148.134] Sleep (dwMilliseconds=0x3e8) [0148.136] Sleep (dwMilliseconds=0x3e8) [0148.184] Sleep (dwMilliseconds=0x3e8) [0148.189] Sleep (dwMilliseconds=0x3e8) [0148.191] Sleep (dwMilliseconds=0x3e8) [0148.193] Sleep (dwMilliseconds=0x3e8) [0148.195] Sleep (dwMilliseconds=0x3e8) [0148.196] Sleep (dwMilliseconds=0x3e8) [0148.198] Sleep (dwMilliseconds=0x3e8) [0148.200] Sleep (dwMilliseconds=0x3e8) [0148.247] Sleep (dwMilliseconds=0x3e8) [0148.251] Sleep (dwMilliseconds=0x3e8) [0148.254] Sleep (dwMilliseconds=0x3e8) [0148.300] Sleep (dwMilliseconds=0x3e8) [0148.302] Sleep (dwMilliseconds=0x3e8) [0148.304] Sleep (dwMilliseconds=0x3e8) [0148.307] Sleep (dwMilliseconds=0x3e8) [0148.353] Sleep (dwMilliseconds=0x3e8) [0148.356] Sleep (dwMilliseconds=0x3e8) [0148.372] Sleep (dwMilliseconds=0x3e8) [0148.416] Sleep (dwMilliseconds=0x3e8) [0148.462] Sleep (dwMilliseconds=0x3e8) [0148.467] Sleep (dwMilliseconds=0x3e8) [0151.246] Sleep (dwMilliseconds=0x3e8) [0151.289] Sleep (dwMilliseconds=0x3e8) [0151.309] Sleep (dwMilliseconds=0x3e8) [0151.312] Sleep (dwMilliseconds=0x3e8) [0151.314] Sleep (dwMilliseconds=0x3e8) [0151.316] Sleep (dwMilliseconds=0x3e8) [0151.366] Sleep (dwMilliseconds=0x3e8) [0151.371] Sleep (dwMilliseconds=0x3e8) [0151.372] Sleep (dwMilliseconds=0x3e8) [0151.413] Sleep (dwMilliseconds=0x3e8) [0151.416] Sleep (dwMilliseconds=0x3e8) [0151.419] Sleep (dwMilliseconds=0x3e8) [0151.423] Sleep (dwMilliseconds=0x3e8) [0151.464] Sleep (dwMilliseconds=0x3e8) [0151.467] Sleep (dwMilliseconds=0x3e8) [0151.468] Sleep (dwMilliseconds=0x3e8) [0151.470] Sleep (dwMilliseconds=0x3e8) [0151.510] Sleep (dwMilliseconds=0x3e8) [0151.513] Sleep (dwMilliseconds=0x3e8) [0151.514] Sleep (dwMilliseconds=0x3e8) [0151.559] Sleep (dwMilliseconds=0x3e8) [0151.561] Sleep (dwMilliseconds=0x3e8) [0151.564] Sleep (dwMilliseconds=0x3e8) [0151.570] Sleep (dwMilliseconds=0x3e8) [0151.616] Sleep (dwMilliseconds=0x3e8) [0151.618] Sleep (dwMilliseconds=0x3e8) [0151.619] Sleep (dwMilliseconds=0x3e8) [0151.621] Sleep (dwMilliseconds=0x3e8) [0151.626] Sleep (dwMilliseconds=0x3e8) [0151.628] Sleep (dwMilliseconds=0x3e8) [0151.630] Sleep (dwMilliseconds=0x3e8) [0151.637] Sleep (dwMilliseconds=0x3e8) [0151.644] Sleep (dwMilliseconds=0x3e8) [0151.648] Sleep (dwMilliseconds=0x3e8) [0151.651] Sleep (dwMilliseconds=0x3e8) [0151.668] Sleep (dwMilliseconds=0x3e8) [0151.677] Sleep (dwMilliseconds=0x3e8) [0151.681] Sleep (dwMilliseconds=0x3e8) [0151.686] Sleep (dwMilliseconds=0x3e8) [0151.687] Sleep (dwMilliseconds=0x3e8) [0151.690] Sleep (dwMilliseconds=0x3e8) [0151.691] Sleep (dwMilliseconds=0x3e8) [0151.693] Sleep (dwMilliseconds=0x3e8) [0151.695] Sleep (dwMilliseconds=0x3e8) [0151.700] Sleep (dwMilliseconds=0x3e8) [0151.702] Sleep (dwMilliseconds=0x3e8) [0151.736] Sleep (dwMilliseconds=0x3e8) [0151.738] Sleep (dwMilliseconds=0x3e8) [0151.740] Sleep (dwMilliseconds=0x3e8) [0151.742] Sleep (dwMilliseconds=0x3e8) [0151.780] Sleep (dwMilliseconds=0x3e8) [0151.783] Sleep (dwMilliseconds=0x3e8) [0154.224] Sleep (dwMilliseconds=0x3e8) [0154.258] Sleep (dwMilliseconds=0x3e8) [0154.270] Sleep (dwMilliseconds=0x3e8) [0154.271] Sleep (dwMilliseconds=0x3e8) [0154.274] Sleep (dwMilliseconds=0x3e8) [0154.275] Sleep (dwMilliseconds=0x3e8) [0154.277] Sleep (dwMilliseconds=0x3e8) [0154.280] Sleep (dwMilliseconds=0x3e8) [0154.281] Sleep (dwMilliseconds=0x3e8) [0154.284] Sleep (dwMilliseconds=0x3e8) [0154.286] Sleep (dwMilliseconds=0x3e8) [0154.289] Sleep (dwMilliseconds=0x3e8) [0154.290] Sleep (dwMilliseconds=0x3e8) [0154.292] Sleep (dwMilliseconds=0x3e8) [0154.294] Sleep (dwMilliseconds=0x3e8) [0154.298] Sleep (dwMilliseconds=0x3e8) [0154.299] Sleep (dwMilliseconds=0x3e8) [0154.336] Sleep (dwMilliseconds=0x3e8) [0154.338] Sleep (dwMilliseconds=0x3e8) [0154.340] Sleep (dwMilliseconds=0x3e8) [0154.343] Sleep (dwMilliseconds=0x3e8) [0154.344] Sleep (dwMilliseconds=0x3e8) [0154.383] Sleep (dwMilliseconds=0x3e8) [0154.385] Sleep (dwMilliseconds=0x3e8) [0154.386] Sleep (dwMilliseconds=0x3e8) [0154.388] Sleep (dwMilliseconds=0x3e8) [0154.389] Sleep (dwMilliseconds=0x3e8) [0154.391] Sleep (dwMilliseconds=0x3e8) [0154.406] Sleep (dwMilliseconds=0x3e8) [0154.443] Sleep (dwMilliseconds=0x3e8) [0154.446] Sleep (dwMilliseconds=0x3e8) [0154.450] Sleep (dwMilliseconds=0x3e8) [0154.486] Sleep (dwMilliseconds=0x3e8) [0154.488] Sleep (dwMilliseconds=0x3e8) [0154.490] Sleep (dwMilliseconds=0x3e8) [0154.497] Sleep (dwMilliseconds=0x3e8) [0154.501] Sleep (dwMilliseconds=0x3e8) [0154.506] Sleep (dwMilliseconds=0x3e8) [0154.509] Sleep (dwMilliseconds=0x3e8) [0154.550] Sleep (dwMilliseconds=0x3e8) [0154.552] Sleep (dwMilliseconds=0x3e8) [0154.555] Sleep (dwMilliseconds=0x3e8) [0154.556] Sleep (dwMilliseconds=0x3e8) [0154.559] Sleep (dwMilliseconds=0x3e8) [0154.563] Sleep (dwMilliseconds=0x3e8) [0154.567] Sleep (dwMilliseconds=0x3e8) [0154.569] Sleep (dwMilliseconds=0x3e8) [0154.628] Sleep (dwMilliseconds=0x3e8) [0154.630] Sleep (dwMilliseconds=0x3e8) [0154.632] Sleep (dwMilliseconds=0x3e8) [0154.634] Sleep (dwMilliseconds=0x3e8) [0154.636] Sleep (dwMilliseconds=0x3e8) [0154.639] Sleep (dwMilliseconds=0x3e8) [0154.641] Sleep (dwMilliseconds=0x3e8) [0154.644] Sleep (dwMilliseconds=0x3e8) [0154.645] Sleep (dwMilliseconds=0x3e8) [0154.647] Sleep (dwMilliseconds=0x3e8) [0154.650] Sleep (dwMilliseconds=0x3e8) [0154.651] Sleep (dwMilliseconds=0x3e8) [0154.653] Sleep (dwMilliseconds=0x3e8) [0154.655] Sleep (dwMilliseconds=0x3e8) [0154.657] Sleep (dwMilliseconds=0x3e8) [0154.660] Sleep (dwMilliseconds=0x3e8) [0154.661] Sleep (dwMilliseconds=0x3e8) [0154.663] Sleep (dwMilliseconds=0x3e8) [0154.665] Sleep (dwMilliseconds=0x3e8) [0154.668] Sleep (dwMilliseconds=0x3e8) [0154.669] Sleep (dwMilliseconds=0x3e8) [0154.672] Sleep (dwMilliseconds=0x3e8) [0154.705] Sleep (dwMilliseconds=0x3e8) [0154.709] Sleep (dwMilliseconds=0x3e8) [0154.711] Sleep (dwMilliseconds=0x3e8) [0155.352] Sleep (dwMilliseconds=0x3e8) [0155.354] Sleep (dwMilliseconds=0x3e8) [0155.359] Sleep (dwMilliseconds=0x3e8) [0155.416] Sleep (dwMilliseconds=0x3e8) [0155.417] Sleep (dwMilliseconds=0x3e8) [0155.420] Sleep (dwMilliseconds=0x3e8) [0155.463] Sleep (dwMilliseconds=0x3e8) [0155.465] Sleep (dwMilliseconds=0x3e8) [0155.467] Sleep (dwMilliseconds=0x3e8) [0155.514] Sleep (dwMilliseconds=0x3e8) [0155.516] Sleep (dwMilliseconds=0x3e8) [0155.518] Sleep (dwMilliseconds=0x3e8) [0155.519] Sleep (dwMilliseconds=0x3e8) [0155.565] Sleep (dwMilliseconds=0x3e8) [0155.568] Sleep (dwMilliseconds=0x3e8) [0155.571] Sleep (dwMilliseconds=0x3e8) [0156.107] Sleep (dwMilliseconds=0x3e8) [0156.149] Sleep (dwMilliseconds=0x3e8) [0156.151] Sleep (dwMilliseconds=0x3e8) [0156.152] Sleep (dwMilliseconds=0x3e8) [0156.155] Sleep (dwMilliseconds=0x3e8) [0156.195] Sleep (dwMilliseconds=0x3e8) [0156.197] Sleep (dwMilliseconds=0x3e8) [0156.201] Sleep (dwMilliseconds=0x3e8) [0156.239] Sleep (dwMilliseconds=0x3e8) [0156.242] Sleep (dwMilliseconds=0x3e8) [0156.281] Sleep (dwMilliseconds=0x3e8) [0156.297] Sleep (dwMilliseconds=0x3e8) [0156.343] Sleep (dwMilliseconds=0x3e8) [0156.346] Sleep (dwMilliseconds=0x3e8) [0156.382] Sleep (dwMilliseconds=0x3e8) [0156.385] Sleep (dwMilliseconds=0x3e8) [0156.389] Sleep (dwMilliseconds=0x3e8) [0156.390] Sleep (dwMilliseconds=0x3e8) [0156.431] Sleep (dwMilliseconds=0x3e8) [0156.433] Sleep (dwMilliseconds=0x3e8) [0156.471] Sleep (dwMilliseconds=0x3e8) [0156.475] Sleep (dwMilliseconds=0x3e8) [0156.514] Sleep (dwMilliseconds=0x3e8) [0156.516] Sleep (dwMilliseconds=0x3e8) [0156.519] Sleep (dwMilliseconds=0x3e8) [0156.573] Sleep (dwMilliseconds=0x3e8) [0156.576] Sleep (dwMilliseconds=0x3e8) [0156.612] Sleep (dwMilliseconds=0x3e8) [0156.613] Sleep (dwMilliseconds=0x3e8) [0156.615] Sleep (dwMilliseconds=0x3e8) [0156.664] Sleep (dwMilliseconds=0x3e8) [0156.666] Sleep (dwMilliseconds=0x3e8) [0156.880] Sleep (dwMilliseconds=0x3e8) [0156.882] Sleep (dwMilliseconds=0x3e8) [0156.884] Sleep (dwMilliseconds=0x3e8) [0156.921] Sleep (dwMilliseconds=0x3e8) [0156.924] Sleep (dwMilliseconds=0x3e8) [0156.966] Sleep (dwMilliseconds=0x3e8) [0156.969] Sleep (dwMilliseconds=0x3e8) [0156.970] Sleep (dwMilliseconds=0x3e8) [0157.003] Sleep (dwMilliseconds=0x3e8) [0157.006] Sleep (dwMilliseconds=0x3e8) [0157.032] Sleep (dwMilliseconds=0x3e8) [0157.111] Sleep (dwMilliseconds=0x3e8) [0157.113] Sleep (dwMilliseconds=0x3e8) [0157.115] Sleep (dwMilliseconds=0x3e8) [0157.168] Sleep (dwMilliseconds=0x3e8) [0157.170] Sleep (dwMilliseconds=0x3e8) [0157.176] Sleep (dwMilliseconds=0x3e8) [0157.219] Sleep (dwMilliseconds=0x3e8) [0157.222] Sleep (dwMilliseconds=0x3e8) [0157.224] Sleep (dwMilliseconds=0x3e8) [0157.289] Sleep (dwMilliseconds=0x3e8) [0157.291] Sleep (dwMilliseconds=0x3e8) [0157.294] Sleep (dwMilliseconds=0x3e8) [0157.346] Sleep (dwMilliseconds=0x3e8) [0157.349] Sleep (dwMilliseconds=0x3e8) [0157.414] Sleep (dwMilliseconds=0x3e8) [0157.419] Sleep (dwMilliseconds=0x3e8) [0157.485] Sleep (dwMilliseconds=0x3e8) [0157.525] Sleep (dwMilliseconds=0x3e8) [0157.528] Sleep (dwMilliseconds=0x3e8) [0157.530] Sleep (dwMilliseconds=0x3e8) [0157.625] Sleep (dwMilliseconds=0x3e8) [0157.627] Sleep (dwMilliseconds=0x3e8) [0157.628] Sleep (dwMilliseconds=0x3e8) [0157.630] Sleep (dwMilliseconds=0x3e8) [0157.632] Sleep (dwMilliseconds=0x3e8) [0157.635] Sleep (dwMilliseconds=0x3e8) [0157.637] Sleep (dwMilliseconds=0x3e8) [0157.639] Sleep (dwMilliseconds=0x3e8) [0157.640] Sleep (dwMilliseconds=0x3e8) [0157.642] Sleep (dwMilliseconds=0x3e8) [0157.644] Sleep (dwMilliseconds=0x3e8) [0157.646] Sleep (dwMilliseconds=0x3e8) [0157.649] Sleep (dwMilliseconds=0x3e8) [0157.650] Sleep (dwMilliseconds=0x3e8) [0157.652] Sleep (dwMilliseconds=0x3e8) [0157.654] Sleep (dwMilliseconds=0x3e8) [0157.656] Sleep (dwMilliseconds=0x3e8) [0157.658] Sleep (dwMilliseconds=0x3e8) [0157.660] Sleep (dwMilliseconds=0x3e8) [0157.662] Sleep (dwMilliseconds=0x3e8) [0157.664] Sleep (dwMilliseconds=0x3e8) [0157.665] Sleep (dwMilliseconds=0x3e8) [0157.667] Sleep (dwMilliseconds=0x3e8) [0157.674] Sleep (dwMilliseconds=0x3e8) [0157.713] Sleep (dwMilliseconds=0x3e8) [0157.715] Sleep (dwMilliseconds=0x3e8) [0157.717] Sleep (dwMilliseconds=0x3e8) [0157.719] Sleep (dwMilliseconds=0x3e8) [0157.724] Sleep (dwMilliseconds=0x3e8) [0157.726] Sleep (dwMilliseconds=0x3e8) [0157.728] Sleep (dwMilliseconds=0x3e8) [0159.911] Sleep (dwMilliseconds=0x3e8) [0159.912] Sleep (dwMilliseconds=0x3e8) [0159.915] Sleep (dwMilliseconds=0x3e8) [0159.919] Sleep (dwMilliseconds=0x3e8) [0159.922] Sleep (dwMilliseconds=0x3e8) [0159.924] Sleep (dwMilliseconds=0x3e8) [0159.928] Sleep (dwMilliseconds=0x3e8) [0159.930] Sleep (dwMilliseconds=0x3e8) [0159.933] Sleep (dwMilliseconds=0x3e8) [0159.938] Sleep (dwMilliseconds=0x3e8) [0159.942] Sleep (dwMilliseconds=0x3e8) [0159.948] Sleep (dwMilliseconds=0x3e8) [0159.949] Sleep (dwMilliseconds=0x3e8) [0159.952] Sleep (dwMilliseconds=0x3e8) [0159.954] Sleep (dwMilliseconds=0x3e8) [0159.958] Sleep (dwMilliseconds=0x3e8) [0159.961] Sleep (dwMilliseconds=0x3e8) [0159.965] Sleep (dwMilliseconds=0x3e8) [0159.966] Sleep (dwMilliseconds=0x3e8) [0159.969] Sleep (dwMilliseconds=0x3e8) [0159.970] Sleep (dwMilliseconds=0x3e8) [0159.973] Sleep (dwMilliseconds=0x3e8) [0159.980] Sleep (dwMilliseconds=0x3e8) [0159.984] Sleep (dwMilliseconds=0x3e8) [0159.988] Sleep (dwMilliseconds=0x3e8) [0159.989] Sleep (dwMilliseconds=0x3e8) [0159.991] Sleep (dwMilliseconds=0x3e8) [0159.995] Sleep (dwMilliseconds=0x3e8) [0159.998] Sleep (dwMilliseconds=0x3e8) [0160.005] Sleep (dwMilliseconds=0x3e8) [0160.006] Sleep (dwMilliseconds=0x3e8) [0160.008] Sleep (dwMilliseconds=0x3e8) [0160.014] Sleep (dwMilliseconds=0x3e8) [0160.016] Sleep (dwMilliseconds=0x3e8) [0160.018] Sleep (dwMilliseconds=0x3e8) [0160.020] Sleep (dwMilliseconds=0x3e8) [0160.022] Sleep (dwMilliseconds=0x3e8) [0160.024] Sleep (dwMilliseconds=0x3e8) [0160.026] Sleep (dwMilliseconds=0x3e8) [0160.028] Sleep (dwMilliseconds=0x3e8) [0160.031] Sleep (dwMilliseconds=0x3e8) [0160.033] Sleep (dwMilliseconds=0x3e8) [0160.036] Sleep (dwMilliseconds=0x3e8) [0160.039] Sleep (dwMilliseconds=0x3e8) [0160.042] Sleep (dwMilliseconds=0x3e8) [0160.046] Sleep (dwMilliseconds=0x3e8) [0160.063] Sleep (dwMilliseconds=0x3e8) [0160.065] Sleep (dwMilliseconds=0x3e8) [0160.103] Sleep (dwMilliseconds=0x3e8) [0160.106] Sleep (dwMilliseconds=0x3e8) [0160.110] Sleep (dwMilliseconds=0x3e8) [0160.112] Sleep (dwMilliseconds=0x3e8) [0160.113] Sleep (dwMilliseconds=0x3e8) [0160.115] Sleep (dwMilliseconds=0x3e8) [0160.116] Sleep (dwMilliseconds=0x3e8) [0160.119] Sleep (dwMilliseconds=0x3e8) [0160.157] Sleep (dwMilliseconds=0x3e8) [0160.159] Sleep (dwMilliseconds=0x3e8) [0160.160] Sleep (dwMilliseconds=0x3e8) [0160.162] Sleep (dwMilliseconds=0x3e8) [0160.165] Sleep (dwMilliseconds=0x3e8) [0160.166] Sleep (dwMilliseconds=0x3e8) [0160.167] Sleep (dwMilliseconds=0x3e8) [0160.169] Sleep (dwMilliseconds=0x3e8) [0160.171] Sleep (dwMilliseconds=0x3e8) [0160.173] Sleep (dwMilliseconds=0x3e8) [0160.176] Sleep (dwMilliseconds=0x3e8) [0160.178] Sleep (dwMilliseconds=0x3e8) [0160.182] Sleep (dwMilliseconds=0x3e8) [0160.226] Sleep (dwMilliseconds=0x3e8) [0160.228] Sleep (dwMilliseconds=0x3e8) [0160.231] Sleep (dwMilliseconds=0x3e8) [0160.232] Sleep (dwMilliseconds=0x3e8) [0160.235] Sleep (dwMilliseconds=0x3e8) [0160.236] Sleep (dwMilliseconds=0x3e8) [0160.238] Sleep (dwMilliseconds=0x3e8) [0160.240] Sleep (dwMilliseconds=0x3e8) [0160.241] Sleep (dwMilliseconds=0x3e8) [0160.243] Sleep (dwMilliseconds=0x3e8) [0160.247] Sleep (dwMilliseconds=0x3e8) [0160.249] Sleep (dwMilliseconds=0x3e8) [0160.253] Sleep (dwMilliseconds=0x3e8) [0160.256] Sleep (dwMilliseconds=0x3e8) [0160.257] Sleep (dwMilliseconds=0x3e8) [0160.261] Sleep (dwMilliseconds=0x3e8) [0160.268] Sleep (dwMilliseconds=0x3e8) [0160.270] Sleep (dwMilliseconds=0x3e8) [0160.280] Sleep (dwMilliseconds=0x3e8) [0160.322] Sleep (dwMilliseconds=0x3e8) [0160.323] Sleep (dwMilliseconds=0x3e8) [0160.325] Sleep (dwMilliseconds=0x3e8) [0160.327] Sleep (dwMilliseconds=0x3e8) [0160.330] Sleep (dwMilliseconds=0x3e8) [0160.331] Sleep (dwMilliseconds=0x3e8) [0160.333] Sleep (dwMilliseconds=0x3e8) [0160.335] Sleep (dwMilliseconds=0x3e8) [0160.337] Sleep (dwMilliseconds=0x3e8) [0160.340] Sleep (dwMilliseconds=0x3e8) [0160.343] Sleep (dwMilliseconds=0x3e8) [0160.345] Sleep (dwMilliseconds=0x3e8) [0160.347] Sleep (dwMilliseconds=0x3e8) [0160.384] Sleep (dwMilliseconds=0x3e8) [0160.385] Sleep (dwMilliseconds=0x3e8) [0160.387] Sleep (dwMilliseconds=0x3e8) [0160.389] Sleep (dwMilliseconds=0x3e8) [0160.391] Sleep (dwMilliseconds=0x3e8) [0160.393] Sleep (dwMilliseconds=0x3e8) [0160.395] Sleep (dwMilliseconds=0x3e8) [0160.397] Sleep (dwMilliseconds=0x3e8) [0160.399] Sleep (dwMilliseconds=0x3e8) [0160.402] Sleep (dwMilliseconds=0x3e8) [0160.403] Sleep (dwMilliseconds=0x3e8) [0160.405] Sleep (dwMilliseconds=0x3e8) [0160.407] Sleep (dwMilliseconds=0x3e8) [0160.409] Sleep (dwMilliseconds=0x3e8) [0160.410] Sleep (dwMilliseconds=0x3e8) [0160.412] Sleep (dwMilliseconds=0x3e8) [0160.416] Sleep (dwMilliseconds=0x3e8) [0160.417] Sleep (dwMilliseconds=0x3e8) [0160.419] Sleep (dwMilliseconds=0x3e8) [0160.421] Sleep (dwMilliseconds=0x3e8) [0160.424] Sleep (dwMilliseconds=0x3e8) [0160.425] Sleep (dwMilliseconds=0x3e8) [0160.427] Sleep (dwMilliseconds=0x3e8) [0160.429] Sleep (dwMilliseconds=0x3e8) [0160.432] Sleep (dwMilliseconds=0x3e8) [0160.434] Sleep (dwMilliseconds=0x3e8) [0160.436] Sleep (dwMilliseconds=0x3e8) [0160.439] Sleep (dwMilliseconds=0x3e8) [0160.440] Sleep (dwMilliseconds=0x3e8) [0160.444] Sleep (dwMilliseconds=0x3e8) [0160.446] Sleep (dwMilliseconds=0x3e8) [0160.449] Sleep (dwMilliseconds=0x3e8) [0160.451] Sleep (dwMilliseconds=0x3e8) [0160.461] Sleep (dwMilliseconds=0x3e8) [0160.462] Sleep (dwMilliseconds=0x3e8) [0160.500] Sleep (dwMilliseconds=0x3e8) [0160.502] Sleep (dwMilliseconds=0x3e8) [0160.504] Sleep (dwMilliseconds=0x3e8) [0160.506] Sleep (dwMilliseconds=0x3e8) [0160.507] Sleep (dwMilliseconds=0x3e8) [0160.508] Sleep (dwMilliseconds=0x3e8) [0160.510] Sleep (dwMilliseconds=0x3e8) [0160.609] Sleep (dwMilliseconds=0x3e8) [0160.610] Sleep (dwMilliseconds=0x3e8) [0160.612] Sleep (dwMilliseconds=0x3e8) [0160.622] Sleep (dwMilliseconds=0x3e8) [0160.623] Sleep (dwMilliseconds=0x3e8) [0160.625] Sleep (dwMilliseconds=0x3e8) [0160.628] Sleep (dwMilliseconds=0x3e8) [0160.664] Sleep (dwMilliseconds=0x3e8) [0161.791] Sleep (dwMilliseconds=0x3e8) [0161.892] Sleep (dwMilliseconds=0x3e8) [0161.911] Sleep (dwMilliseconds=0x3e8) [0165.249] Sleep (dwMilliseconds=0x3e8) [0165.252] Sleep (dwMilliseconds=0x3e8) [0165.253] Sleep (dwMilliseconds=0x3e8) [0165.257] Sleep (dwMilliseconds=0x3e8) [0165.258] Sleep (dwMilliseconds=0x3e8) [0165.306] Sleep (dwMilliseconds=0x3e8) [0165.310] Sleep (dwMilliseconds=0x3e8) [0165.312] Sleep (dwMilliseconds=0x3e8) [0165.313] Sleep (dwMilliseconds=0x3e8) [0165.315] Sleep (dwMilliseconds=0x3e8) [0165.316] Sleep (dwMilliseconds=0x3e8) [0165.318] Sleep (dwMilliseconds=0x3e8) [0165.321] Sleep (dwMilliseconds=0x3e8) [0165.322] Sleep (dwMilliseconds=0x3e8) [0165.324] Sleep (dwMilliseconds=0x3e8) [0165.327] Sleep (dwMilliseconds=0x3e8) [0165.328] Sleep (dwMilliseconds=0x3e8) [0165.330] Sleep (dwMilliseconds=0x3e8) [0165.383] Sleep (dwMilliseconds=0x3e8) [0165.386] Sleep (dwMilliseconds=0x3e8) [0165.388] Sleep (dwMilliseconds=0x3e8) [0165.390] Sleep (dwMilliseconds=0x3e8) [0165.392] Sleep (dwMilliseconds=0x3e8) [0165.393] Sleep (dwMilliseconds=0x3e8) [0165.395] Sleep (dwMilliseconds=0x3e8) [0165.398] Sleep (dwMilliseconds=0x3e8) [0165.401] Sleep (dwMilliseconds=0x3e8) [0165.404] Sleep (dwMilliseconds=0x3e8) [0165.405] Sleep (dwMilliseconds=0x3e8) [0165.407] Sleep (dwMilliseconds=0x3e8) [0165.410] Sleep (dwMilliseconds=0x3e8) [0165.412] Sleep (dwMilliseconds=0x3e8) [0165.415] Sleep (dwMilliseconds=0x3e8) [0165.416] Sleep (dwMilliseconds=0x3e8) [0166.767] Sleep (dwMilliseconds=0x3e8) [0166.809] Sleep (dwMilliseconds=0x3e8) [0166.811] Sleep (dwMilliseconds=0x3e8) [0166.813] Sleep (dwMilliseconds=0x3e8) [0166.858] Sleep (dwMilliseconds=0x3e8) [0166.860] Sleep (dwMilliseconds=0x3e8) [0166.895] Sleep (dwMilliseconds=0x3e8) [0166.897] Sleep (dwMilliseconds=0x3e8) [0166.899] Sleep (dwMilliseconds=0x3e8) [0166.931] Sleep (dwMilliseconds=0x3e8) [0166.934] Sleep (dwMilliseconds=0x3e8) [0166.963] Sleep (dwMilliseconds=0x3e8) [0166.965] Sleep (dwMilliseconds=0x3e8) [0166.967] Sleep (dwMilliseconds=0x3e8) [0167.015] Sleep (dwMilliseconds=0x3e8) [0167.017] Sleep (dwMilliseconds=0x3e8) [0167.019] Sleep (dwMilliseconds=0x3e8) [0167.021] Sleep (dwMilliseconds=0x3e8) [0167.023] Sleep (dwMilliseconds=0x3e8) [0167.025] Sleep (dwMilliseconds=0x3e8) [0167.066] Sleep (dwMilliseconds=0x3e8) [0167.067] Sleep (dwMilliseconds=0x3e8) [0167.070] Sleep (dwMilliseconds=0x3e8) [0167.078] Sleep (dwMilliseconds=0x3e8) [0167.081] Sleep (dwMilliseconds=0x3e8) [0167.135] Sleep (dwMilliseconds=0x3e8) [0167.137] Sleep (dwMilliseconds=0x3e8) [0167.140] Sleep (dwMilliseconds=0x3e8) [0167.142] Sleep (dwMilliseconds=0x3e8) [0167.162] Sleep (dwMilliseconds=0x3e8) [0167.164] Sleep (dwMilliseconds=0x3e8) [0167.166] Sleep (dwMilliseconds=0x3e8) [0167.167] Sleep (dwMilliseconds=0x3e8) [0167.169] Sleep (dwMilliseconds=0x3e8) [0167.171] Sleep (dwMilliseconds=0x3e8) [0167.174] Sleep (dwMilliseconds=0x3e8) [0167.175] Sleep (dwMilliseconds=0x3e8) [0167.178] Sleep (dwMilliseconds=0x3e8) [0167.179] Sleep (dwMilliseconds=0x3e8) [0167.567] Sleep (dwMilliseconds=0x3e8) [0167.613] Sleep (dwMilliseconds=0x3e8) [0167.616] Sleep (dwMilliseconds=0x3e8) [0167.618] Sleep (dwMilliseconds=0x3e8) [0167.619] Sleep (dwMilliseconds=0x3e8) [0167.622] Sleep (dwMilliseconds=0x3e8) [0167.623] Sleep (dwMilliseconds=0x3e8) [0167.626] Sleep (dwMilliseconds=0x3e8) [0167.628] Sleep (dwMilliseconds=0x3e8) [0167.671] Sleep (dwMilliseconds=0x3e8) [0167.677] Sleep (dwMilliseconds=0x3e8) [0167.678] Sleep (dwMilliseconds=0x3e8) [0167.680] Sleep (dwMilliseconds=0x3e8) [0167.682] Sleep (dwMilliseconds=0x3e8) [0167.684] Sleep (dwMilliseconds=0x3e8) [0167.686] Sleep (dwMilliseconds=0x3e8) [0167.688] Sleep (dwMilliseconds=0x3e8) [0167.691] Sleep (dwMilliseconds=0x3e8) [0167.693] Sleep (dwMilliseconds=0x3e8) [0167.694] Sleep (dwMilliseconds=0x3e8) [0167.696] Sleep (dwMilliseconds=0x3e8) [0167.698] Sleep (dwMilliseconds=0x3e8) [0167.700] Sleep (dwMilliseconds=0x3e8) [0167.703] Sleep (dwMilliseconds=0x3e8) [0167.705] Sleep (dwMilliseconds=0x3e8) [0167.750] Sleep (dwMilliseconds=0x3e8) [0167.754] Sleep (dwMilliseconds=0x3e8) [0167.755] Sleep (dwMilliseconds=0x3e8) [0167.758] Sleep (dwMilliseconds=0x3e8) [0167.759] Sleep (dwMilliseconds=0x3e8) [0167.763] Sleep (dwMilliseconds=0x3e8) [0167.766] Sleep (dwMilliseconds=0x3e8) [0167.771] Sleep (dwMilliseconds=0x3e8) [0167.818] Sleep (dwMilliseconds=0x3e8) [0167.835] Sleep (dwMilliseconds=0x3e8) [0167.836] Sleep (dwMilliseconds=0x3e8) [0167.838] Sleep (dwMilliseconds=0x3e8) [0167.840] Sleep (dwMilliseconds=0x3e8) [0167.843] Sleep (dwMilliseconds=0x3e8) [0167.844] Sleep (dwMilliseconds=0x3e8) [0167.847] Sleep (dwMilliseconds=0x3e8) [0167.848] Sleep (dwMilliseconds=0x3e8) [0167.850] Sleep (dwMilliseconds=0x3e8) [0167.853] Sleep (dwMilliseconds=0x3e8) [0167.854] Sleep (dwMilliseconds=0x3e8) [0167.857] Sleep (dwMilliseconds=0x3e8) [0167.859] Sleep (dwMilliseconds=0x3e8) [0167.860] Sleep (dwMilliseconds=0x3e8) [0167.905] Sleep (dwMilliseconds=0x3e8) [0167.906] Sleep (dwMilliseconds=0x3e8) [0167.910] Sleep (dwMilliseconds=0x3e8) [0167.911] Sleep (dwMilliseconds=0x3e8) [0167.913] Sleep (dwMilliseconds=0x3e8) [0167.915] Sleep (dwMilliseconds=0x3e8) [0167.957] Sleep (dwMilliseconds=0x3e8) [0167.959] Sleep (dwMilliseconds=0x3e8) [0167.960] Sleep (dwMilliseconds=0x3e8) [0167.962] Sleep (dwMilliseconds=0x3e8) [0167.964] Sleep (dwMilliseconds=0x3e8) [0167.965] Sleep (dwMilliseconds=0x3e8) [0167.971] Sleep (dwMilliseconds=0x3e8) [0167.972] Sleep (dwMilliseconds=0x3e8) [0167.975] Sleep (dwMilliseconds=0x3e8) [0167.976] Sleep (dwMilliseconds=0x3e8) [0167.979] Sleep (dwMilliseconds=0x3e8) [0167.982] Sleep (dwMilliseconds=0x3e8) [0167.983] Sleep (dwMilliseconds=0x3e8) [0167.986] Sleep (dwMilliseconds=0x3e8) [0168.426] Sleep (dwMilliseconds=0x3e8) [0168.439] Sleep (dwMilliseconds=0x3e8) [0168.490] Sleep (dwMilliseconds=0x3e8) [0168.492] Sleep (dwMilliseconds=0x3e8) [0168.493] Sleep (dwMilliseconds=0x3e8) [0168.528] Sleep (dwMilliseconds=0x3e8) [0168.530] Sleep (dwMilliseconds=0x3e8) [0168.533] Sleep (dwMilliseconds=0x3e8) [0168.571] Sleep (dwMilliseconds=0x3e8) [0168.575] Sleep (dwMilliseconds=0x3e8) [0168.576] Sleep (dwMilliseconds=0x3e8) [0168.589] Sleep (dwMilliseconds=0x3e8) [0168.590] Sleep (dwMilliseconds=0x3e8) [0168.593] Sleep (dwMilliseconds=0x3e8) [0168.636] Sleep (dwMilliseconds=0x3e8) [0168.637] Sleep (dwMilliseconds=0x3e8) [0168.639] Sleep (dwMilliseconds=0x3e8) [0168.641] Sleep (dwMilliseconds=0x3e8) [0168.644] Sleep (dwMilliseconds=0x3e8) [0168.646] Sleep (dwMilliseconds=0x3e8) [0168.647] Sleep (dwMilliseconds=0x3e8) [0168.651] Sleep (dwMilliseconds=0x3e8) [0168.655] Sleep (dwMilliseconds=0x3e8) [0168.669] Sleep (dwMilliseconds=0x3e8) [0168.710] Sleep (dwMilliseconds=0x3e8) [0168.712] Sleep (dwMilliseconds=0x3e8) [0168.714] Sleep (dwMilliseconds=0x3e8) [0168.715] Sleep (dwMilliseconds=0x3e8) [0168.718] Sleep (dwMilliseconds=0x3e8) [0168.734] Sleep (dwMilliseconds=0x3e8) [0168.735] Sleep (dwMilliseconds=0x3e8) [0168.737] Sleep (dwMilliseconds=0x3e8) [0168.739] Sleep (dwMilliseconds=0x3e8) [0168.741] Sleep (dwMilliseconds=0x3e8) [0168.744] Sleep (dwMilliseconds=0x3e8) [0168.745] Sleep (dwMilliseconds=0x3e8) [0168.747] Sleep (dwMilliseconds=0x3e8) [0168.751] Sleep (dwMilliseconds=0x3e8) [0168.754] Sleep (dwMilliseconds=0x3e8) [0168.756] Sleep (dwMilliseconds=0x3e8) [0168.797] Sleep (dwMilliseconds=0x3e8) [0168.799] Sleep (dwMilliseconds=0x3e8) [0168.805] Sleep (dwMilliseconds=0x3e8) [0168.808] Sleep (dwMilliseconds=0x3e8) [0168.809] Sleep (dwMilliseconds=0x3e8) [0168.811] Sleep (dwMilliseconds=0x3e8) [0168.814] Sleep (dwMilliseconds=0x3e8) [0168.822] Sleep (dwMilliseconds=0x3e8) [0168.826] Sleep (dwMilliseconds=0x3e8) [0168.876] Sleep (dwMilliseconds=0x3e8) [0168.878] Sleep (dwMilliseconds=0x3e8) [0168.879] Sleep (dwMilliseconds=0x3e8) [0168.882] Sleep (dwMilliseconds=0x3e8) [0168.924] Sleep (dwMilliseconds=0x3e8) [0168.961] Sleep (dwMilliseconds=0x3e8) [0168.964] Sleep (dwMilliseconds=0x3e8) [0168.967] Sleep (dwMilliseconds=0x3e8) [0168.971] Sleep (dwMilliseconds=0x3e8) [0169.013] Sleep (dwMilliseconds=0x3e8) [0169.014] Sleep (dwMilliseconds=0x3e8) [0169.017] Sleep (dwMilliseconds=0x3e8) [0169.019] Sleep (dwMilliseconds=0x3e8) [0169.020] Sleep (dwMilliseconds=0x3e8) [0169.057] Sleep (dwMilliseconds=0x3e8) [0169.058] Sleep (dwMilliseconds=0x3e8) [0169.061] Sleep (dwMilliseconds=0x3e8) [0169.062] Sleep (dwMilliseconds=0x3e8) [0169.065] Sleep (dwMilliseconds=0x3e8) [0169.067] Sleep (dwMilliseconds=0x3e8) [0169.069] Sleep (dwMilliseconds=0x3e8) [0169.074] Sleep (dwMilliseconds=0x3e8) [0169.075] Sleep (dwMilliseconds=0x3e8) [0169.077] Sleep (dwMilliseconds=0x3e8) [0169.079] Sleep (dwMilliseconds=0x3e8) [0169.081] Sleep (dwMilliseconds=0x3e8) [0169.083] Sleep (dwMilliseconds=0x3e8) [0169.085] Sleep (dwMilliseconds=0x3e8) [0169.087] Sleep (dwMilliseconds=0x3e8) [0169.089] Sleep (dwMilliseconds=0x3e8) [0169.091] Sleep (dwMilliseconds=0x3e8) [0169.094] Sleep (dwMilliseconds=0x3e8) [0169.096] Sleep (dwMilliseconds=0x3e8) [0169.100] Sleep (dwMilliseconds=0x3e8) [0169.103] Sleep (dwMilliseconds=0x3e8) [0169.104] Sleep (dwMilliseconds=0x3e8) [0169.118] Sleep (dwMilliseconds=0x3e8) [0169.120] Sleep (dwMilliseconds=0x3e8) [0169.121] Sleep (dwMilliseconds=0x3e8) [0169.124] Sleep (dwMilliseconds=0x3e8) [0169.125] Sleep (dwMilliseconds=0x3e8) [0169.127] Sleep (dwMilliseconds=0x3e8) [0169.129] Sleep (dwMilliseconds=0x3e8) [0169.181] Sleep (dwMilliseconds=0x3e8) [0169.184] Sleep (dwMilliseconds=0x3e8) [0169.185] Sleep (dwMilliseconds=0x3e8) [0169.187] Sleep (dwMilliseconds=0x3e8) [0169.190] Sleep (dwMilliseconds=0x3e8) [0169.194] Sleep (dwMilliseconds=0x3e8) [0169.242] Sleep (dwMilliseconds=0x3e8) [0169.244] Sleep (dwMilliseconds=0x3e8) [0169.248] Sleep (dwMilliseconds=0x3e8) [0169.295] Sleep (dwMilliseconds=0x3e8) [0169.298] Sleep (dwMilliseconds=0x3e8) [0170.077] Sleep (dwMilliseconds=0x3e8) [0170.161] Sleep (dwMilliseconds=0x3e8) [0170.167] Sleep (dwMilliseconds=0x3e8) [0170.170] Sleep (dwMilliseconds=0x3e8) [0170.171] Sleep (dwMilliseconds=0x3e8) [0170.174] Sleep (dwMilliseconds=0x3e8) [0170.175] Sleep (dwMilliseconds=0x3e8) [0170.178] Sleep (dwMilliseconds=0x3e8) [0170.182] Sleep (dwMilliseconds=0x3e8) [0170.185] Sleep (dwMilliseconds=0x3e8) [0170.187] Sleep (dwMilliseconds=0x3e8) [0170.239] Sleep (dwMilliseconds=0x3e8) [0170.243] Sleep (dwMilliseconds=0x3e8) [0170.244] Sleep (dwMilliseconds=0x3e8) [0170.247] Sleep (dwMilliseconds=0x3e8) [0170.250] Sleep (dwMilliseconds=0x3e8) [0170.296] Sleep (dwMilliseconds=0x3e8) [0170.299] Sleep (dwMilliseconds=0x3e8) [0170.302] Sleep (dwMilliseconds=0x3e8) [0170.304] Sleep (dwMilliseconds=0x3e8) [0170.346] Sleep (dwMilliseconds=0x3e8) [0170.348] Sleep (dwMilliseconds=0x3e8) [0170.351] Sleep (dwMilliseconds=0x3e8) [0170.353] Sleep (dwMilliseconds=0x3e8) [0170.400] Sleep (dwMilliseconds=0x3e8) [0170.403] Sleep (dwMilliseconds=0x3e8) [0170.405] Sleep (dwMilliseconds=0x3e8) [0170.407] Sleep (dwMilliseconds=0x3e8) [0170.408] Sleep (dwMilliseconds=0x3e8) [0170.454] Sleep (dwMilliseconds=0x3e8) [0170.455] Sleep (dwMilliseconds=0x3e8) [0170.457] Sleep (dwMilliseconds=0x3e8) [0170.460] Sleep (dwMilliseconds=0x3e8) [0170.461] Sleep (dwMilliseconds=0x3e8) [0170.463] Sleep (dwMilliseconds=0x3e8) [0170.466] Sleep (dwMilliseconds=0x3e8) [0170.468] Sleep (dwMilliseconds=0x3e8) [0170.470] Sleep (dwMilliseconds=0x3e8) [0170.474] Sleep (dwMilliseconds=0x3e8) [0170.476] Sleep (dwMilliseconds=0x3e8) [0170.478] Sleep (dwMilliseconds=0x3e8) [0170.479] Sleep (dwMilliseconds=0x3e8) [0170.483] Sleep (dwMilliseconds=0x3e8) [0170.485] Sleep (dwMilliseconds=0x3e8) [0170.487] Sleep (dwMilliseconds=0x3e8) [0170.488] Sleep (dwMilliseconds=0x3e8) [0170.491] Sleep (dwMilliseconds=0x3e8) [0170.494] Sleep (dwMilliseconds=0x3e8) [0170.498] Sleep (dwMilliseconds=0x3e8) [0170.500] Sleep (dwMilliseconds=0x3e8) [0170.503] Sleep (dwMilliseconds=0x3e8) [0170.505] Sleep (dwMilliseconds=0x3e8) [0170.508] Sleep (dwMilliseconds=0x3e8) [0170.509] Sleep (dwMilliseconds=0x3e8) [0170.511] Sleep (dwMilliseconds=0x3e8) [0170.513] Sleep (dwMilliseconds=0x3e8) [0170.515] Sleep (dwMilliseconds=0x3e8) [0170.520] Sleep (dwMilliseconds=0x3e8) [0170.521] Sleep (dwMilliseconds=0x3e8) [0170.523] Sleep (dwMilliseconds=0x3e8) [0170.525] Sleep (dwMilliseconds=0x3e8) [0170.527] Sleep (dwMilliseconds=0x3e8) [0170.530] Sleep (dwMilliseconds=0x3e8) [0170.531] Sleep (dwMilliseconds=0x3e8) [0170.533] Sleep (dwMilliseconds=0x3e8) [0170.535] Sleep (dwMilliseconds=0x3e8) [0170.539] Sleep (dwMilliseconds=0x3e8) [0170.542] Sleep (dwMilliseconds=0x3e8) [0170.544] Sleep (dwMilliseconds=0x3e8) [0170.546] Sleep (dwMilliseconds=0x3e8) [0170.547] Sleep (dwMilliseconds=0x3e8) [0170.550] Sleep (dwMilliseconds=0x3e8) [0170.552] Sleep (dwMilliseconds=0x3e8) [0170.553] Sleep (dwMilliseconds=0x3e8) [0170.555] Sleep (dwMilliseconds=0x3e8) [0170.557] Sleep (dwMilliseconds=0x3e8) [0170.559] Sleep (dwMilliseconds=0x3e8) [0170.562] Sleep (dwMilliseconds=0x3e8) [0170.564] Sleep (dwMilliseconds=0x3e8) [0170.566] Sleep (dwMilliseconds=0x3e8) [0170.567] Sleep (dwMilliseconds=0x3e8) [0170.569] Sleep (dwMilliseconds=0x3e8) [0170.575] Sleep (dwMilliseconds=0x3e8) [0170.576] Sleep (dwMilliseconds=0x3e8) [0170.579] Sleep (dwMilliseconds=0x3e8) [0170.581] Sleep (dwMilliseconds=0x3e8) [0170.584] Sleep (dwMilliseconds=0x3e8) [0170.586] Sleep (dwMilliseconds=0x3e8) [0170.587] Sleep (dwMilliseconds=0x3e8) [0170.590] Sleep (dwMilliseconds=0x3e8) [0170.592] Sleep (dwMilliseconds=0x3e8) [0170.593] Sleep (dwMilliseconds=0x3e8) [0170.596] Sleep (dwMilliseconds=0x3e8) [0170.598] Sleep (dwMilliseconds=0x3e8) [0170.618] Sleep (dwMilliseconds=0x3e8) [0170.627] Sleep (dwMilliseconds=0x3e8) [0170.632] Sleep (dwMilliseconds=0x3e8) [0170.636] Sleep (dwMilliseconds=0x3e8) [0170.657] Sleep (dwMilliseconds=0x3e8) [0170.740] Sleep (dwMilliseconds=0x3e8) [0170.780] Sleep (dwMilliseconds=0x3e8) [0170.783] Sleep (dwMilliseconds=0x3e8) [0170.784] Sleep (dwMilliseconds=0x3e8) [0170.822] Sleep (dwMilliseconds=0x3e8) [0170.826] Sleep (dwMilliseconds=0x3e8) [0170.828] Sleep (dwMilliseconds=0x3e8) [0170.829] Sleep (dwMilliseconds=0x3e8) [0170.832] Sleep (dwMilliseconds=0x3e8) [0170.834] Sleep (dwMilliseconds=0x3e8) [0170.836] Sleep (dwMilliseconds=0x3e8) [0170.882] Sleep (dwMilliseconds=0x3e8) [0170.884] Sleep (dwMilliseconds=0x3e8) [0170.887] Sleep (dwMilliseconds=0x3e8) [0170.929] Sleep (dwMilliseconds=0x3e8) [0170.933] Sleep (dwMilliseconds=0x3e8) [0170.935] Sleep (dwMilliseconds=0x3e8) [0170.937] Sleep (dwMilliseconds=0x3e8) [0170.977] Sleep (dwMilliseconds=0x3e8) [0170.979] Sleep (dwMilliseconds=0x3e8) [0170.980] Sleep (dwMilliseconds=0x3e8) [0170.984] Sleep (dwMilliseconds=0x3e8) [0171.027] Sleep (dwMilliseconds=0x3e8) [0171.030] Sleep (dwMilliseconds=0x3e8) [0171.032] Sleep (dwMilliseconds=0x3e8) [0171.085] Sleep (dwMilliseconds=0x3e8) [0171.095] Sleep (dwMilliseconds=0x3e8) [0171.097] Sleep (dwMilliseconds=0x3e8) [0171.099] Sleep (dwMilliseconds=0x3e8) [0171.142] Sleep (dwMilliseconds=0x3e8) [0171.144] Sleep (dwMilliseconds=0x3e8) [0171.146] Sleep (dwMilliseconds=0x3e8) [0171.185] Sleep (dwMilliseconds=0x3e8) [0171.187] Sleep (dwMilliseconds=0x3e8) [0171.189] Sleep (dwMilliseconds=0x3e8) [0171.228] Sleep (dwMilliseconds=0x3e8) [0171.230] Sleep (dwMilliseconds=0x3e8) [0171.232] Sleep (dwMilliseconds=0x3e8) [0171.266] Sleep (dwMilliseconds=0x3e8) [0171.268] Sleep (dwMilliseconds=0x3e8) [0171.270] Sleep (dwMilliseconds=0x3e8) [0171.272] Sleep (dwMilliseconds=0x3e8) [0171.274] Sleep (dwMilliseconds=0x3e8) [0171.316] Sleep (dwMilliseconds=0x3e8) [0171.320] Sleep (dwMilliseconds=0x3e8) [0171.322] Sleep (dwMilliseconds=0x3e8) [0171.324] Sleep (dwMilliseconds=0x3e8) [0171.364] Sleep (dwMilliseconds=0x3e8) [0171.366] Sleep (dwMilliseconds=0x3e8) [0171.368] Sleep (dwMilliseconds=0x3e8) [0171.411] Sleep (dwMilliseconds=0x3e8) [0171.413] Sleep (dwMilliseconds=0x3e8) [0171.453] Sleep (dwMilliseconds=0x3e8) [0171.455] Sleep (dwMilliseconds=0x3e8) [0171.459] Sleep (dwMilliseconds=0x3e8) [0171.499] Sleep (dwMilliseconds=0x3e8) [0171.501] Sleep (dwMilliseconds=0x3e8) [0171.504] Sleep (dwMilliseconds=0x3e8) [0171.506] Sleep (dwMilliseconds=0x3e8) [0171.508] Sleep (dwMilliseconds=0x3e8) [0171.510] Sleep (dwMilliseconds=0x3e8) [0171.512] Sleep (dwMilliseconds=0x3e8) [0171.513] Sleep (dwMilliseconds=0x3e8) [0171.516] Sleep (dwMilliseconds=0x3e8) [0171.517] Sleep (dwMilliseconds=0x3e8) [0171.520] Sleep (dwMilliseconds=0x3e8) [0171.522] Sleep (dwMilliseconds=0x3e8) [0171.524] Sleep (dwMilliseconds=0x3e8) [0171.575] Sleep (dwMilliseconds=0x3e8) [0171.576] Sleep (dwMilliseconds=0x3e8) [0171.579] Sleep (dwMilliseconds=0x3e8) [0171.581] Sleep (dwMilliseconds=0x3e8) [0171.585] Sleep (dwMilliseconds=0x3e8) [0171.586] Sleep (dwMilliseconds=0x3e8) [0171.588] Sleep (dwMilliseconds=0x3e8) [0171.590] Sleep (dwMilliseconds=0x3e8) [0171.596] Sleep (dwMilliseconds=0x3e8) [0171.638] Sleep (dwMilliseconds=0x3e8) [0171.642] Sleep (dwMilliseconds=0x3e8) [0171.685] Sleep (dwMilliseconds=0x3e8) [0171.689] Sleep (dwMilliseconds=0x3e8) [0171.692] Sleep (dwMilliseconds=0x3e8) [0171.777] Sleep (dwMilliseconds=0x3e8) [0171.781] Sleep (dwMilliseconds=0x3e8) [0171.783] Sleep (dwMilliseconds=0x3e8) [0171.832] Sleep (dwMilliseconds=0x3e8) [0171.835] Sleep (dwMilliseconds=0x3e8) [0171.837] Sleep (dwMilliseconds=0x3e8) [0171.878] Sleep (dwMilliseconds=0x3e8) [0171.883] Sleep (dwMilliseconds=0x3e8) [0171.920] Sleep (dwMilliseconds=0x3e8) [0171.923] Sleep (dwMilliseconds=0x3e8) [0171.926] Sleep (dwMilliseconds=0x3e8) [0171.927] Sleep (dwMilliseconds=0x3e8) [0171.929] Sleep (dwMilliseconds=0x3e8) [0171.932] Sleep (dwMilliseconds=0x3e8) [0171.972] Sleep (dwMilliseconds=0x3e8) [0171.974] Sleep (dwMilliseconds=0x3e8) [0171.986] Sleep (dwMilliseconds=0x3e8) [0172.026] Sleep (dwMilliseconds=0x3e8) [0172.030] Sleep (dwMilliseconds=0x3e8) [0172.032] Sleep (dwMilliseconds=0x3e8) [0172.034] Sleep (dwMilliseconds=0x3e8) [0172.083] Sleep (dwMilliseconds=0x3e8) [0172.086] Sleep (dwMilliseconds=0x3e8) [0172.088] Sleep (dwMilliseconds=0x3e8) [0172.133] Sleep (dwMilliseconds=0x3e8) [0172.135] Sleep (dwMilliseconds=0x3e8) [0172.137] Sleep (dwMilliseconds=0x3e8) [0172.139] Sleep (dwMilliseconds=0x3e8) [0172.177] Sleep (dwMilliseconds=0x3e8) [0172.179] Sleep (dwMilliseconds=0x3e8) [0172.181] Sleep (dwMilliseconds=0x3e8) [0172.182] Sleep (dwMilliseconds=0x3e8) [0172.222] Sleep (dwMilliseconds=0x3e8) [0172.224] Sleep (dwMilliseconds=0x3e8) [0172.227] Sleep (dwMilliseconds=0x3e8) [0172.229] Sleep (dwMilliseconds=0x3e8) [0172.230] Sleep (dwMilliseconds=0x3e8) [0172.233] Sleep (dwMilliseconds=0x3e8) [0172.234] Sleep (dwMilliseconds=0x3e8) [0172.237] Sleep (dwMilliseconds=0x3e8) [0172.239] Sleep (dwMilliseconds=0x3e8) [0172.243] Sleep (dwMilliseconds=0x3e8) [0172.245] Sleep (dwMilliseconds=0x3e8) [0172.304] Sleep (dwMilliseconds=0x3e8) [0172.305] Sleep (dwMilliseconds=0x3e8) [0172.307] Sleep (dwMilliseconds=0x3e8) [0172.309] Sleep (dwMilliseconds=0x3e8) [0172.311] Sleep (dwMilliseconds=0x3e8) [0172.313] Sleep (dwMilliseconds=0x3e8) [0172.315] Sleep (dwMilliseconds=0x3e8) [0172.352] Sleep (dwMilliseconds=0x3e8) [0172.355] Sleep (dwMilliseconds=0x3e8) [0172.356] Sleep (dwMilliseconds=0x3e8) [0172.358] Sleep (dwMilliseconds=0x3e8) [0172.360] Sleep (dwMilliseconds=0x3e8) [0172.362] Sleep (dwMilliseconds=0x3e8) [0172.364] Sleep (dwMilliseconds=0x3e8) [0172.366] Sleep (dwMilliseconds=0x3e8) [0172.369] Sleep (dwMilliseconds=0x3e8) [0172.376] Sleep (dwMilliseconds=0x3e8) [0172.384] Sleep (dwMilliseconds=0x3e8) [0172.387] Sleep (dwMilliseconds=0x3e8) [0172.390] Sleep (dwMilliseconds=0x3e8) [0172.394] Sleep (dwMilliseconds=0x3e8) [0172.404] Sleep (dwMilliseconds=0x3e8) [0172.407] Sleep (dwMilliseconds=0x3e8) [0172.409] Sleep (dwMilliseconds=0x3e8) [0172.413] Sleep (dwMilliseconds=0x3e8) [0172.414] Sleep (dwMilliseconds=0x3e8) [0172.417] Sleep (dwMilliseconds=0x3e8) [0172.422] Sleep (dwMilliseconds=0x3e8) [0172.423] Sleep (dwMilliseconds=0x3e8) [0172.426] Sleep (dwMilliseconds=0x3e8) [0172.433] Sleep (dwMilliseconds=0x3e8) [0172.435] Sleep (dwMilliseconds=0x3e8) [0172.446] Sleep (dwMilliseconds=0x3e8) [0172.448] Sleep (dwMilliseconds=0x3e8) [0172.450] Sleep (dwMilliseconds=0x3e8) [0172.451] Sleep (dwMilliseconds=0x3e8) [0172.453] Sleep (dwMilliseconds=0x3e8) [0172.647] Sleep (dwMilliseconds=0x3e8) [0172.648] Sleep (dwMilliseconds=0x3e8) [0172.650] Sleep (dwMilliseconds=0x3e8) [0172.652] Sleep (dwMilliseconds=0x3e8) [0172.654] Sleep (dwMilliseconds=0x3e8) [0172.658] Sleep (dwMilliseconds=0x3e8) [0172.659] Sleep (dwMilliseconds=0x3e8) [0172.661] Sleep (dwMilliseconds=0x3e8) [0172.663] Sleep (dwMilliseconds=0x3e8) [0172.665] Sleep (dwMilliseconds=0x3e8) [0172.714] Sleep (dwMilliseconds=0x3e8) [0172.716] Sleep (dwMilliseconds=0x3e8) [0172.778] Sleep (dwMilliseconds=0x3e8) [0172.780] Sleep (dwMilliseconds=0x3e8) [0172.782] Sleep (dwMilliseconds=0x3e8) [0172.818] Sleep (dwMilliseconds=0x3e8) [0172.820] Sleep (dwMilliseconds=0x3e8) [0172.822] Sleep (dwMilliseconds=0x3e8) [0172.858] Sleep (dwMilliseconds=0x3e8) [0172.860] Sleep (dwMilliseconds=0x3e8) [0172.862] Sleep (dwMilliseconds=0x3e8) [0172.899] Sleep (dwMilliseconds=0x3e8) [0172.903] Sleep (dwMilliseconds=0x3e8) [0172.946] Sleep (dwMilliseconds=0x3e8) [0172.949] Sleep (dwMilliseconds=0x3e8) [0172.951] Sleep (dwMilliseconds=0x3e8) [0172.953] Sleep (dwMilliseconds=0x3e8) [0172.989] Sleep (dwMilliseconds=0x3e8) [0172.992] Sleep (dwMilliseconds=0x3e8) [0172.993] Sleep (dwMilliseconds=0x3e8) [0172.995] Sleep (dwMilliseconds=0x3e8) [0172.997] Sleep (dwMilliseconds=0x3e8) [0173.035] Sleep (dwMilliseconds=0x3e8) [0173.038] Sleep (dwMilliseconds=0x3e8) [0173.093] Sleep (dwMilliseconds=0x3e8) [0173.100] Sleep (dwMilliseconds=0x3e8) [0173.103] Sleep (dwMilliseconds=0x3e8) [0173.106] Sleep (dwMilliseconds=0x3e8) [0173.168] Sleep (dwMilliseconds=0x3e8) [0173.183] Sleep (dwMilliseconds=0x3e8) [0173.185] Sleep (dwMilliseconds=0x3e8) [0173.189] Sleep (dwMilliseconds=0x3e8) [0174.224] Sleep (dwMilliseconds=0x3e8) [0174.226] Sleep (dwMilliseconds=0x3e8) [0174.228] Sleep (dwMilliseconds=0x3e8) [0174.271] Sleep (dwMilliseconds=0x3e8) [0174.272] Sleep (dwMilliseconds=0x3e8) [0174.275] Sleep (dwMilliseconds=0x3e8) [0174.276] Sleep (dwMilliseconds=0x3e8) [0174.279] Sleep (dwMilliseconds=0x3e8) [0174.282] Sleep (dwMilliseconds=0x3e8) [0174.285] Sleep (dwMilliseconds=0x3e8) [0174.286] Sleep (dwMilliseconds=0x3e8) [0174.288] Sleep (dwMilliseconds=0x3e8) [0174.291] Sleep (dwMilliseconds=0x3e8) [0174.293] Sleep (dwMilliseconds=0x3e8) [0174.295] Sleep (dwMilliseconds=0x3e8) [0174.342] Sleep (dwMilliseconds=0x3e8) [0174.348] Sleep (dwMilliseconds=0x3e8) [0174.406] Sleep (dwMilliseconds=0x3e8) [0174.407] Sleep (dwMilliseconds=0x3e8) [0174.410] Sleep (dwMilliseconds=0x3e8) [0174.411] Sleep (dwMilliseconds=0x3e8) [0174.415] Sleep (dwMilliseconds=0x3e8) [0174.468] Sleep (dwMilliseconds=0x3e8) [0174.471] Sleep (dwMilliseconds=0x3e8) [0174.472] Sleep (dwMilliseconds=0x3e8) [0174.475] Sleep (dwMilliseconds=0x3e8) [0174.477] Sleep (dwMilliseconds=0x3e8) [0174.479] Sleep (dwMilliseconds=0x3e8) [0174.482] Sleep (dwMilliseconds=0x3e8) [0174.483] Sleep (dwMilliseconds=0x3e8) [0174.485] Sleep (dwMilliseconds=0x3e8) [0174.526] Sleep (dwMilliseconds=0x3e8) [0174.529] Sleep (dwMilliseconds=0x3e8) [0176.136] Sleep (dwMilliseconds=0x3e8) [0176.138] Sleep (dwMilliseconds=0x3e8) [0176.179] Sleep (dwMilliseconds=0x3e8) [0176.180] Sleep (dwMilliseconds=0x3e8) [0176.183] Sleep (dwMilliseconds=0x3e8) [0176.227] Sleep (dwMilliseconds=0x3e8) [0176.228] Sleep (dwMilliseconds=0x3e8) [0176.231] Sleep (dwMilliseconds=0x3e8) [0176.234] Sleep (dwMilliseconds=0x3e8) [0176.274] Sleep (dwMilliseconds=0x3e8) [0176.276] Sleep (dwMilliseconds=0x3e8) [0176.279] Sleep (dwMilliseconds=0x3e8) [0176.336] Sleep (dwMilliseconds=0x3e8) [0176.338] Sleep (dwMilliseconds=0x3e8) [0176.340] Sleep (dwMilliseconds=0x3e8) [0176.343] Sleep (dwMilliseconds=0x3e8) [0176.347] Sleep (dwMilliseconds=0x3e8) [0176.349] Sleep (dwMilliseconds=0x3e8) [0176.353] Sleep (dwMilliseconds=0x3e8) [0176.357] Sleep (dwMilliseconds=0x3e8) [0176.359] Sleep (dwMilliseconds=0x3e8) [0176.364] Sleep (dwMilliseconds=0x3e8) [0176.371] Sleep (dwMilliseconds=0x3e8) [0176.374] Sleep (dwMilliseconds=0x3e8) [0176.380] Sleep (dwMilliseconds=0x3e8) [0176.382] Sleep (dwMilliseconds=0x3e8) [0176.386] Sleep (dwMilliseconds=0x3e8) [0176.389] Sleep (dwMilliseconds=0x3e8) [0176.392] Sleep (dwMilliseconds=0x3e8) [0176.394] Sleep (dwMilliseconds=0x3e8) [0176.396] Sleep (dwMilliseconds=0x3e8) [0176.398] Sleep (dwMilliseconds=0x3e8) [0176.399] Sleep (dwMilliseconds=0x3e8) [0176.402] Sleep (dwMilliseconds=0x3e8) [0176.403] Sleep (dwMilliseconds=0x3e8) [0176.437] Sleep (dwMilliseconds=0x3e8) [0176.438] Sleep (dwMilliseconds=0x3e8) [0176.440] Sleep (dwMilliseconds=0x3e8) [0176.442] Sleep (dwMilliseconds=0x3e8) [0176.444] Sleep (dwMilliseconds=0x3e8) [0176.446] Sleep (dwMilliseconds=0x3e8) [0176.449] Sleep (dwMilliseconds=0x3e8) [0176.450] Sleep (dwMilliseconds=0x3e8) [0176.452] Sleep (dwMilliseconds=0x3e8) [0176.454] Sleep (dwMilliseconds=0x3e8) [0176.463] Sleep (dwMilliseconds=0x3e8) [0176.495] Sleep (dwMilliseconds=0x3e8) [0176.498] Sleep (dwMilliseconds=0x3e8) [0176.499] Sleep (dwMilliseconds=0x3e8) [0176.529] Sleep (dwMilliseconds=0x3e8) [0176.532] Sleep (dwMilliseconds=0x3e8) [0176.535] Sleep (dwMilliseconds=0x3e8) [0176.573] Sleep (dwMilliseconds=0x3e8) [0176.575] Sleep (dwMilliseconds=0x3e8) [0176.580] Sleep (dwMilliseconds=0x3e8) [0176.582] Sleep (dwMilliseconds=0x3e8) [0176.583] Sleep (dwMilliseconds=0x3e8) [0176.586] Sleep (dwMilliseconds=0x3e8) [0176.625] Sleep (dwMilliseconds=0x3e8) [0176.627] Sleep (dwMilliseconds=0x3e8) [0176.629] Sleep (dwMilliseconds=0x3e8) [0176.632] Sleep (dwMilliseconds=0x3e8) [0176.633] Sleep (dwMilliseconds=0x3e8) [0176.635] Sleep (dwMilliseconds=0x3e8) [0176.675] Sleep (dwMilliseconds=0x3e8) [0176.677] Sleep (dwMilliseconds=0x3e8) [0176.681] Sleep (dwMilliseconds=0x3e8) [0176.683] Sleep (dwMilliseconds=0x3e8) [0176.722] Sleep (dwMilliseconds=0x3e8) [0176.725] Sleep (dwMilliseconds=0x3e8) [0176.726] Sleep (dwMilliseconds=0x3e8) [0177.093] Sleep (dwMilliseconds=0x3e8) [0177.141] Sleep (dwMilliseconds=0x3e8) [0177.145] Sleep (dwMilliseconds=0x3e8) [0177.146] Sleep (dwMilliseconds=0x3e8) [0177.149] Sleep (dwMilliseconds=0x3e8) [0177.150] Sleep (dwMilliseconds=0x3e8) [0177.153] Sleep (dwMilliseconds=0x3e8) [0177.154] Sleep (dwMilliseconds=0x3e8) [0177.156] Sleep (dwMilliseconds=0x3e8) [0177.158] Sleep (dwMilliseconds=0x3e8) [0177.161] Sleep (dwMilliseconds=0x3e8) [0177.162] Sleep (dwMilliseconds=0x3e8) [0177.164] Sleep (dwMilliseconds=0x3e8) [0177.166] Sleep (dwMilliseconds=0x3e8) [0177.168] Sleep (dwMilliseconds=0x3e8) [0177.171] Sleep (dwMilliseconds=0x3e8) [0177.172] Sleep (dwMilliseconds=0x3e8) [0177.174] Sleep (dwMilliseconds=0x3e8) [0177.176] Sleep (dwMilliseconds=0x3e8) [0177.178] Sleep (dwMilliseconds=0x3e8) [0177.181] Sleep (dwMilliseconds=0x3e8) [0177.183] Sleep (dwMilliseconds=0x3e8) [0177.193] Sleep (dwMilliseconds=0x3e8) [0177.195] Sleep (dwMilliseconds=0x3e8) [0177.230] Sleep (dwMilliseconds=0x3e8) [0177.231] Sleep (dwMilliseconds=0x3e8) [0177.234] Sleep (dwMilliseconds=0x3e8) [0177.235] Sleep (dwMilliseconds=0x3e8) [0177.237] Sleep (dwMilliseconds=0x3e8) [0177.239] Sleep (dwMilliseconds=0x3e8) [0177.241] Sleep (dwMilliseconds=0x3e8) [0177.243] Sleep (dwMilliseconds=0x3e8) [0177.245] Sleep (dwMilliseconds=0x3e8) [0177.247] Sleep (dwMilliseconds=0x3e8) [0177.280] Sleep (dwMilliseconds=0x3e8) [0177.283] Sleep (dwMilliseconds=0x3e8) [0177.284] Sleep (dwMilliseconds=0x3e8) [0177.287] Sleep (dwMilliseconds=0x3e8) [0177.288] Sleep (dwMilliseconds=0x3e8) [0177.290] Sleep (dwMilliseconds=0x3e8) [0177.292] Sleep (dwMilliseconds=0x3e8) [0177.294] Sleep (dwMilliseconds=0x3e8) [0177.296] Sleep (dwMilliseconds=0x3e8) [0177.298] Sleep (dwMilliseconds=0x3e8) [0177.300] Sleep (dwMilliseconds=0x3e8) [0177.302] Sleep (dwMilliseconds=0x3e8) [0177.304] Sleep (dwMilliseconds=0x3e8) [0177.306] Sleep (dwMilliseconds=0x3e8) [0177.309] Sleep (dwMilliseconds=0x3e8) [0177.310] Sleep (dwMilliseconds=0x3e8) [0177.312] Sleep (dwMilliseconds=0x3e8) [0177.316] Sleep (dwMilliseconds=0x3e8) [0177.358] Sleep (dwMilliseconds=0x3e8) [0177.360] Sleep (dwMilliseconds=0x3e8) [0177.363] Sleep (dwMilliseconds=0x3e8) [0177.364] Sleep (dwMilliseconds=0x3e8) [0177.556] Sleep (dwMilliseconds=0x3e8) [0177.587] Sleep (dwMilliseconds=0x3e8) [0177.589] Sleep (dwMilliseconds=0x3e8) [0177.591] Sleep (dwMilliseconds=0x3e8) [0177.593] Sleep (dwMilliseconds=0x3e8) [0177.595] Sleep (dwMilliseconds=0x3e8) [0177.597] Sleep (dwMilliseconds=0x3e8) [0177.600] Sleep (dwMilliseconds=0x3e8) [0177.620] Sleep (dwMilliseconds=0x3e8) [0177.657] Sleep (dwMilliseconds=0x3e8) [0177.658] Sleep (dwMilliseconds=0x3e8) [0177.675] Sleep (dwMilliseconds=0x3e8) [0177.677] Sleep (dwMilliseconds=0x3e8) [0177.680] Sleep (dwMilliseconds=0x3e8) [0177.682] Sleep (dwMilliseconds=0x3e8) [0177.683] Sleep (dwMilliseconds=0x3e8) [0177.734] Sleep (dwMilliseconds=0x3e8) [0177.736] Sleep (dwMilliseconds=0x3e8) [0177.737] Sleep (dwMilliseconds=0x3e8) [0177.739] Sleep (dwMilliseconds=0x3e8) [0177.741] Sleep (dwMilliseconds=0x3e8) [0177.744] Sleep (dwMilliseconds=0x3e8) [0177.746] Sleep (dwMilliseconds=0x3e8) [0177.747] Sleep (dwMilliseconds=0x3e8) [0177.749] Sleep (dwMilliseconds=0x3e8) [0177.751] Sleep (dwMilliseconds=0x3e8) [0177.754] Sleep (dwMilliseconds=0x3e8) [0177.791] Sleep (dwMilliseconds=0x3e8) [0177.797] Sleep (dwMilliseconds=0x3e8) [0177.866] Sleep (dwMilliseconds=0x3e8) [0177.867] Sleep (dwMilliseconds=0x3e8) [0177.870] Sleep (dwMilliseconds=0x3e8) [0177.872] Sleep (dwMilliseconds=0x3e8) [0177.927] Sleep (dwMilliseconds=0x3e8) [0177.932] Sleep (dwMilliseconds=0x3e8) [0177.968] Sleep (dwMilliseconds=0x3e8) [0177.970] Sleep (dwMilliseconds=0x3e8) [0178.007] Sleep (dwMilliseconds=0x3e8) [0178.009] Sleep (dwMilliseconds=0x3e8) [0178.011] Sleep (dwMilliseconds=0x3e8) [0178.049] Sleep (dwMilliseconds=0x3e8) [0178.051] Sleep (dwMilliseconds=0x3e8) [0178.053] Sleep (dwMilliseconds=0x3e8) [0178.091] Sleep (dwMilliseconds=0x3e8) [0178.093] Sleep (dwMilliseconds=0x3e8) [0178.138] Sleep (dwMilliseconds=0x3e8) [0178.141] Sleep (dwMilliseconds=0x3e8) [0178.144] Sleep (dwMilliseconds=0x3e8) [0178.181] Sleep (dwMilliseconds=0x3e8) [0178.183] Sleep (dwMilliseconds=0x3e8) [0178.185] Sleep (dwMilliseconds=0x3e8) [0178.223] Sleep (dwMilliseconds=0x3e8) [0178.225] Sleep (dwMilliseconds=0x3e8) [0178.228] Sleep (dwMilliseconds=0x3e8) [0178.265] Sleep (dwMilliseconds=0x3e8) [0178.267] Sleep (dwMilliseconds=0x3e8) [0178.270] Sleep (dwMilliseconds=0x3e8) [0178.311] Sleep (dwMilliseconds=0x3e8) [0178.313] Sleep (dwMilliseconds=0x3e8) [0178.317] Sleep (dwMilliseconds=0x3e8) [0178.355] Sleep (dwMilliseconds=0x3e8) [0178.358] Sleep (dwMilliseconds=0x3e8) [0178.394] Sleep (dwMilliseconds=0x3e8) [0178.396] Sleep (dwMilliseconds=0x3e8) [0178.405] Sleep (dwMilliseconds=0x3e8) [0178.406] Sleep (dwMilliseconds=0x3e8) [0178.408] Sleep (dwMilliseconds=0x3e8) [0178.447] Sleep (dwMilliseconds=0x3e8) [0178.449] Sleep (dwMilliseconds=0x3e8) [0178.452] Sleep (dwMilliseconds=0x3e8) [0178.454] Sleep (dwMilliseconds=0x3e8) [0178.495] Sleep (dwMilliseconds=0x3e8) [0178.499] Sleep (dwMilliseconds=0x3e8) [0178.540] Sleep (dwMilliseconds=0x3e8) [0178.543] Sleep (dwMilliseconds=0x3e8) [0178.545] Sleep (dwMilliseconds=0x3e8) [0178.582] Sleep (dwMilliseconds=0x3e8) [0178.585] Sleep (dwMilliseconds=0x3e8) [0178.586] Sleep (dwMilliseconds=0x3e8) [0178.588] Sleep (dwMilliseconds=0x3e8) [0178.628] Sleep (dwMilliseconds=0x3e8) [0178.630] Sleep (dwMilliseconds=0x3e8) [0178.690] Sleep (dwMilliseconds=0x3e8) [0178.692] Sleep (dwMilliseconds=0x3e8) [0178.694] Sleep (dwMilliseconds=0x3e8) [0178.739] Sleep (dwMilliseconds=0x3e8) [0178.743] Sleep (dwMilliseconds=0x3e8) [0178.785] Sleep (dwMilliseconds=0x3e8) [0178.787] Sleep (dwMilliseconds=0x3e8) [0178.789] Sleep (dwMilliseconds=0x3e8) [0178.794] Sleep (dwMilliseconds=0x3e8) [0178.795] Sleep (dwMilliseconds=0x3e8) [0178.797] Sleep (dwMilliseconds=0x3e8) [0178.800] Sleep (dwMilliseconds=0x3e8) [0178.801] Sleep (dwMilliseconds=0x3e8) [0178.804] Sleep (dwMilliseconds=0x3e8) [0178.806] Sleep (dwMilliseconds=0x3e8) [0178.808] Sleep (dwMilliseconds=0x3e8) [0178.813] Sleep (dwMilliseconds=0x3e8) [0178.814] Sleep (dwMilliseconds=0x3e8) [0178.817] Sleep (dwMilliseconds=0x3e8) [0178.819] Sleep (dwMilliseconds=0x3e8) [0178.820] Sleep (dwMilliseconds=0x3e8) [0178.823] Sleep (dwMilliseconds=0x3e8) [0178.865] Sleep (dwMilliseconds=0x3e8) [0178.869] Sleep (dwMilliseconds=0x3e8) [0178.905] Sleep (dwMilliseconds=0x3e8) [0178.907] Sleep (dwMilliseconds=0x3e8) [0178.909] Sleep (dwMilliseconds=0x3e8) [0178.910] Sleep (dwMilliseconds=0x3e8) [0178.945] Sleep (dwMilliseconds=0x3e8) [0178.948] Sleep (dwMilliseconds=0x3e8) [0178.987] Sleep (dwMilliseconds=0x3e8) [0178.990] Sleep (dwMilliseconds=0x3e8) [0178.992] Sleep (dwMilliseconds=0x3e8) [0178.993] Sleep (dwMilliseconds=0x3e8) [0179.035] Sleep (dwMilliseconds=0x3e8) [0179.038] Sleep (dwMilliseconds=0x3e8) [0179.040] Sleep (dwMilliseconds=0x3e8) [0179.078] Sleep (dwMilliseconds=0x3e8) [0179.080] Sleep (dwMilliseconds=0x3e8) [0179.081] Sleep (dwMilliseconds=0x3e8) [0179.117] Sleep (dwMilliseconds=0x3e8) [0179.119] Sleep (dwMilliseconds=0x3e8) [0179.133] Sleep (dwMilliseconds=0x3e8) [0179.136] Sleep (dwMilliseconds=0x3e8) [0179.137] Sleep (dwMilliseconds=0x3e8) [0179.139] Sleep (dwMilliseconds=0x3e8) [0179.172] Sleep (dwMilliseconds=0x3e8) [0179.176] Sleep (dwMilliseconds=0x3e8) [0179.210] Sleep (dwMilliseconds=0x3e8) [0179.212] Sleep (dwMilliseconds=0x3e8) [0179.215] Sleep (dwMilliseconds=0x3e8) [0179.216] Sleep (dwMilliseconds=0x3e8) [0179.218] Sleep (dwMilliseconds=0x3e8) [0179.220] Sleep (dwMilliseconds=0x3e8) [0179.222] Sleep (dwMilliseconds=0x3e8) [0179.223] Sleep (dwMilliseconds=0x3e8) [0179.225] Sleep (dwMilliseconds=0x3e8) [0179.227] Sleep (dwMilliseconds=0x3e8) [0179.230] Sleep (dwMilliseconds=0x3e8) [0179.231] Sleep (dwMilliseconds=0x3e8) [0179.234] Sleep (dwMilliseconds=0x3e8) [0179.236] Sleep (dwMilliseconds=0x3e8) [0179.239] Sleep (dwMilliseconds=0x3e8) [0179.240] Sleep (dwMilliseconds=0x3e8) [0179.242] Sleep (dwMilliseconds=0x3e8) [0179.244] Sleep (dwMilliseconds=0x3e8) [0179.246] Sleep (dwMilliseconds=0x3e8) [0179.249] Sleep (dwMilliseconds=0x3e8) [0179.250] Sleep (dwMilliseconds=0x3e8) [0179.252] Sleep (dwMilliseconds=0x3e8) [0179.671] Sleep (dwMilliseconds=0x3e8) [0179.674] Sleep (dwMilliseconds=0x3e8) [0179.675] Sleep (dwMilliseconds=0x3e8) [0179.677] Sleep (dwMilliseconds=0x3e8) [0179.680] Sleep (dwMilliseconds=0x3e8) [0179.681] Sleep (dwMilliseconds=0x3e8) [0179.684] Sleep (dwMilliseconds=0x3e8) [0179.685] Sleep (dwMilliseconds=0x3e8) [0179.687] Sleep (dwMilliseconds=0x3e8) [0179.689] Sleep (dwMilliseconds=0x3e8) [0179.694] Sleep (dwMilliseconds=0x3e8) [0179.695] Sleep (dwMilliseconds=0x3e8) [0179.697] Sleep (dwMilliseconds=0x3e8) [0179.699] Sleep (dwMilliseconds=0x3e8) [0179.701] Sleep (dwMilliseconds=0x3e8) [0179.704] Sleep (dwMilliseconds=0x3e8) [0179.706] Sleep (dwMilliseconds=0x3e8) [0179.707] Sleep (dwMilliseconds=0x3e8) [0179.709] Sleep (dwMilliseconds=0x3e8) [0179.710] Sleep (dwMilliseconds=0x3e8) [0179.712] Sleep (dwMilliseconds=0x3e8) [0179.714] Sleep (dwMilliseconds=0x3e8) [0179.716] Sleep (dwMilliseconds=0x3e8) [0179.717] Sleep (dwMilliseconds=0x3e8) [0179.720] Sleep (dwMilliseconds=0x3e8) [0179.723] Sleep (dwMilliseconds=0x3e8) [0179.725] Sleep (dwMilliseconds=0x3e8) [0179.726] Sleep (dwMilliseconds=0x3e8) [0179.728] Sleep (dwMilliseconds=0x3e8) [0179.729] Sleep (dwMilliseconds=0x3e8) [0179.730] Sleep (dwMilliseconds=0x3e8) [0179.732] Sleep (dwMilliseconds=0x3e8) [0179.735] Sleep (dwMilliseconds=0x3e8) [0179.736] Sleep (dwMilliseconds=0x3e8) [0179.765] Sleep (dwMilliseconds=0x3e8) [0179.767] Sleep (dwMilliseconds=0x3e8) [0179.769] Sleep (dwMilliseconds=0x3e8) [0179.771] Sleep (dwMilliseconds=0x3e8) [0179.775] Sleep (dwMilliseconds=0x3e8) [0179.778] Sleep (dwMilliseconds=0x3e8) [0179.851] Sleep (dwMilliseconds=0x3e8) [0179.856] Sleep (dwMilliseconds=0x3e8) [0179.875] Sleep (dwMilliseconds=0x3e8) [0179.888] Sleep (dwMilliseconds=0x3e8) [0179.892] Sleep (dwMilliseconds=0x3e8) [0179.913] Sleep (dwMilliseconds=0x3e8) [0179.918] Sleep (dwMilliseconds=0x3e8) [0179.924] Sleep (dwMilliseconds=0x3e8) [0179.926] Sleep (dwMilliseconds=0x3e8) [0179.927] Sleep (dwMilliseconds=0x3e8) [0179.929] Sleep (dwMilliseconds=0x3e8) [0179.935] Sleep (dwMilliseconds=0x3e8) [0179.937] Sleep (dwMilliseconds=0x3e8) [0179.941] Sleep (dwMilliseconds=0x3e8) [0179.943] Sleep (dwMilliseconds=0x3e8) [0179.944] Sleep (dwMilliseconds=0x3e8) [0179.947] Sleep (dwMilliseconds=0x3e8) [0179.948] Sleep (dwMilliseconds=0x3e8) [0179.950] Sleep (dwMilliseconds=0x3e8) [0179.952] Sleep (dwMilliseconds=0x3e8) [0179.955] Sleep (dwMilliseconds=0x3e8) [0179.956] Sleep (dwMilliseconds=0x3e8) [0179.958] Sleep (dwMilliseconds=0x3e8) [0179.959] Sleep (dwMilliseconds=0x3e8) [0179.961] Sleep (dwMilliseconds=0x3e8) [0179.963] Sleep (dwMilliseconds=0x3e8) [0179.987] Sleep (dwMilliseconds=0x3e8) [0179.989] Sleep (dwMilliseconds=0x3e8) [0179.991] Sleep (dwMilliseconds=0x3e8) [0179.993] Sleep (dwMilliseconds=0x3e8) [0179.994] Sleep (dwMilliseconds=0x3e8) [0179.996] Sleep (dwMilliseconds=0x3e8) [0179.999] Sleep (dwMilliseconds=0x3e8) [0180.000] Sleep (dwMilliseconds=0x3e8) [0180.001] Sleep (dwMilliseconds=0x3e8) [0180.002] Sleep (dwMilliseconds=0x3e8) [0180.004] Sleep (dwMilliseconds=0x3e8) [0180.007] Sleep (dwMilliseconds=0x3e8) [0180.008] Sleep (dwMilliseconds=0x3e8) [0180.010] Sleep (dwMilliseconds=0x3e8) [0180.012] Sleep (dwMilliseconds=0x3e8) [0180.014] Sleep (dwMilliseconds=0x3e8) [0180.017] Sleep (dwMilliseconds=0x3e8) [0180.018] Sleep (dwMilliseconds=0x3e8) [0180.021] Sleep (dwMilliseconds=0x3e8) [0180.023] Sleep (dwMilliseconds=0x3e8) [0180.025] Sleep (dwMilliseconds=0x3e8) [0180.026] Sleep (dwMilliseconds=0x3e8) [0180.028] Sleep (dwMilliseconds=0x3e8) [0180.030] Sleep (dwMilliseconds=0x3e8) [0180.032] Sleep (dwMilliseconds=0x3e8) [0180.035] Sleep (dwMilliseconds=0x3e8) [0180.036] Sleep (dwMilliseconds=0x3e8) [0180.038] Sleep (dwMilliseconds=0x3e8) [0180.040] Sleep (dwMilliseconds=0x3e8) [0180.042] Sleep (dwMilliseconds=0x3e8) [0180.045] Sleep (dwMilliseconds=0x3e8) [0180.046] Sleep (dwMilliseconds=0x3e8) [0180.048] Sleep (dwMilliseconds=0x3e8) [0180.050] Sleep (dwMilliseconds=0x3e8) [0180.053] Sleep (dwMilliseconds=0x3e8) [0180.055] Sleep (dwMilliseconds=0x3e8) [0180.056] Sleep (dwMilliseconds=0x3e8) [0180.060] Sleep (dwMilliseconds=0x3e8) [0180.065] Sleep (dwMilliseconds=0x3e8) [0180.066] Sleep (dwMilliseconds=0x3e8) [0180.068] Sleep (dwMilliseconds=0x3e8) [0180.069] Sleep (dwMilliseconds=0x3e8) [0180.072] Sleep (dwMilliseconds=0x3e8) [0180.074] Sleep (dwMilliseconds=0x3e8) [0180.076] Sleep (dwMilliseconds=0x3e8) [0180.078] Sleep (dwMilliseconds=0x3e8) [0180.079] Sleep (dwMilliseconds=0x3e8) [0180.082] Sleep (dwMilliseconds=0x3e8) [0180.083] Sleep (dwMilliseconds=0x3e8) [0180.085] Sleep (dwMilliseconds=0x3e8) [0180.087] Sleep (dwMilliseconds=0x3e8) [0180.089] Sleep (dwMilliseconds=0x3e8) [0180.100] Sleep (dwMilliseconds=0x3e8) [0180.101] Sleep (dwMilliseconds=0x3e8) [0180.103] Sleep (dwMilliseconds=0x3e8) [0180.108] Sleep (dwMilliseconds=0x3e8) [0180.109] Sleep (dwMilliseconds=0x3e8) [0180.111] Sleep (dwMilliseconds=0x3e8) [0180.113] Sleep (dwMilliseconds=0x3e8) [0180.115] Sleep (dwMilliseconds=0x3e8) [0180.118] Sleep (dwMilliseconds=0x3e8) [0180.119] Sleep (dwMilliseconds=0x3e8) [0180.129] Sleep (dwMilliseconds=0x3e8) [0180.130] Sleep (dwMilliseconds=0x3e8) [0180.133] Sleep (dwMilliseconds=0x3e8) [0180.134] Sleep (dwMilliseconds=0x3e8) [0180.137] Sleep (dwMilliseconds=0x3e8) [0180.140] Sleep (dwMilliseconds=0x3e8) [0180.141] Sleep (dwMilliseconds=0x3e8) [0180.143] Sleep (dwMilliseconds=0x3e8) [0180.145] Sleep (dwMilliseconds=0x3e8) [0180.146] Sleep (dwMilliseconds=0x3e8) [0180.151] Sleep (dwMilliseconds=0x3e8) [0180.153] Sleep (dwMilliseconds=0x3e8) [0180.154] Sleep (dwMilliseconds=0x3e8) [0180.156] Sleep (dwMilliseconds=0x3e8) [0180.158] Sleep (dwMilliseconds=0x3e8) [0180.160] Sleep (dwMilliseconds=0x3e8) [0180.162] Sleep (dwMilliseconds=0x3e8) [0180.164] Sleep (dwMilliseconds=0x3e8) [0180.166] Sleep (dwMilliseconds=0x3e8) [0180.168] Sleep (dwMilliseconds=0x3e8) [0180.174] Sleep (dwMilliseconds=0x3e8) [0180.177] Sleep (dwMilliseconds=0x3e8) [0180.179] Sleep (dwMilliseconds=0x3e8) [0180.180] Sleep (dwMilliseconds=0x3e8) [0180.182] Sleep (dwMilliseconds=0x3e8) [0180.184] Sleep (dwMilliseconds=0x3e8) [0180.188] Sleep (dwMilliseconds=0x3e8) [0180.207] Sleep (dwMilliseconds=0x3e8) [0180.211] Sleep (dwMilliseconds=0x3e8) [0180.212] Sleep (dwMilliseconds=0x3e8) [0180.215] Sleep (dwMilliseconds=0x3e8) [0180.218] Sleep (dwMilliseconds=0x3e8) [0180.220] Sleep (dwMilliseconds=0x3e8) [0180.222] Sleep (dwMilliseconds=0x3e8) [0180.223] Sleep (dwMilliseconds=0x3e8) [0180.225] Sleep (dwMilliseconds=0x3e8) [0180.231] Sleep (dwMilliseconds=0x3e8) [0180.234] Sleep (dwMilliseconds=0x3e8) [0180.235] Sleep (dwMilliseconds=0x3e8) [0180.237] Sleep (dwMilliseconds=0x3e8) [0180.239] Sleep (dwMilliseconds=0x3e8) [0180.241] Sleep (dwMilliseconds=0x3e8) [0180.243] Sleep (dwMilliseconds=0x3e8) [0180.245] Sleep (dwMilliseconds=0x3e8) [0180.247] Sleep (dwMilliseconds=0x3e8) [0180.250] Sleep (dwMilliseconds=0x3e8) [0180.251] Sleep (dwMilliseconds=0x3e8) [0180.253] Sleep (dwMilliseconds=0x3e8) [0180.255] Sleep (dwMilliseconds=0x3e8) [0180.257] Sleep (dwMilliseconds=0x3e8) [0180.259] Sleep (dwMilliseconds=0x3e8) [0180.261] Sleep (dwMilliseconds=0x3e8) [0180.263] Sleep (dwMilliseconds=0x3e8) [0180.265] Sleep (dwMilliseconds=0x3e8) [0180.268] Sleep (dwMilliseconds=0x3e8) [0180.269] Sleep (dwMilliseconds=0x3e8) [0180.271] Sleep (dwMilliseconds=0x3e8) [0180.273] Sleep (dwMilliseconds=0x3e8) [0180.277] Sleep (dwMilliseconds=0x3e8) [0180.280] Sleep (dwMilliseconds=0x3e8) [0180.282] Sleep (dwMilliseconds=0x3e8) [0180.284] Sleep (dwMilliseconds=0x3e8) [0180.286] Sleep (dwMilliseconds=0x3e8) [0180.289] Sleep (dwMilliseconds=0x3e8) [0180.294] Sleep (dwMilliseconds=0x3e8) [0180.295] Sleep (dwMilliseconds=0x3e8) [0180.298] Sleep (dwMilliseconds=0x3e8) [0180.299] Sleep (dwMilliseconds=0x3e8) [0180.301] Sleep (dwMilliseconds=0x3e8) [0180.304] Sleep (dwMilliseconds=0x3e8) [0180.306] Sleep (dwMilliseconds=0x3e8) [0180.307] Sleep (dwMilliseconds=0x3e8) [0180.309] Sleep (dwMilliseconds=0x3e8) [0180.311] Sleep (dwMilliseconds=0x3e8) [0180.313] Sleep (dwMilliseconds=0x3e8) [0180.315] Sleep (dwMilliseconds=0x3e8) [0180.316] Sleep (dwMilliseconds=0x3e8) [0180.320] Sleep (dwMilliseconds=0x3e8) [0180.321] Sleep (dwMilliseconds=0x3e8) [0180.323] Sleep (dwMilliseconds=0x3e8) [0180.326] Sleep (dwMilliseconds=0x3e8) [0180.327] Sleep (dwMilliseconds=0x3e8) [0180.329] Sleep (dwMilliseconds=0x3e8) [0180.331] Sleep (dwMilliseconds=0x3e8) [0180.333] Sleep (dwMilliseconds=0x3e8) [0180.335] Sleep (dwMilliseconds=0x3e8) [0180.337] Sleep (dwMilliseconds=0x3e8) [0180.340] Sleep (dwMilliseconds=0x3e8) [0180.342] Sleep (dwMilliseconds=0x3e8) [0180.344] Sleep (dwMilliseconds=0x3e8) [0180.346] Sleep (dwMilliseconds=0x3e8) [0180.349] Sleep (dwMilliseconds=0x3e8) [0180.350] Sleep (dwMilliseconds=0x3e8) [0180.353] Sleep (dwMilliseconds=0x3e8) [0180.354] Sleep (dwMilliseconds=0x3e8) [0180.357] Sleep (dwMilliseconds=0x3e8) [0180.358] Sleep (dwMilliseconds=0x3e8) [0180.371] Sleep (dwMilliseconds=0x3e8) [0180.372] Sleep (dwMilliseconds=0x3e8) [0180.375] Sleep (dwMilliseconds=0x3e8) [0180.377] Sleep (dwMilliseconds=0x3e8) [0180.379] Sleep (dwMilliseconds=0x3e8) [0180.380] Sleep (dwMilliseconds=0x3e8) [0180.383] Sleep (dwMilliseconds=0x3e8) [0180.384] Sleep (dwMilliseconds=0x3e8) [0180.386] Sleep (dwMilliseconds=0x3e8) [0180.387] Sleep (dwMilliseconds=0x3e8) [0180.390] Sleep (dwMilliseconds=0x3e8) [0180.392] Sleep (dwMilliseconds=0x3e8) [0181.265] Sleep (dwMilliseconds=0x3e8) [0181.266] Sleep (dwMilliseconds=0x3e8) [0181.268] Sleep (dwMilliseconds=0x3e8) [0181.270] Sleep (dwMilliseconds=0x3e8) [0181.286] Sleep (dwMilliseconds=0x3e8) [0181.287] Sleep (dwMilliseconds=0x3e8) [0181.296] Sleep (dwMilliseconds=0x3e8) [0181.300] Sleep (dwMilliseconds=0x3e8) [0181.302] Sleep (dwMilliseconds=0x3e8) [0181.305] Sleep (dwMilliseconds=0x3e8) [0181.311] Sleep (dwMilliseconds=0x3e8) [0181.313] Sleep (dwMilliseconds=0x3e8) [0181.315] Sleep (dwMilliseconds=0x3e8) [0181.318] Sleep (dwMilliseconds=0x3e8) [0181.320] Sleep (dwMilliseconds=0x3e8) [0181.331] Sleep (dwMilliseconds=0x3e8) [0181.335] Sleep (dwMilliseconds=0x3e8) [0181.338] Sleep (dwMilliseconds=0x3e8) [0181.340] Sleep (dwMilliseconds=0x3e8) [0181.342] Sleep (dwMilliseconds=0x3e8) [0181.344] Sleep (dwMilliseconds=0x3e8) [0181.345] Sleep (dwMilliseconds=0x3e8) [0181.347] Sleep (dwMilliseconds=0x3e8) [0181.348] Sleep (dwMilliseconds=0x3e8) [0181.350] Sleep (dwMilliseconds=0x3e8) [0181.352] Sleep (dwMilliseconds=0x3e8) [0181.354] Sleep (dwMilliseconds=0x3e8) [0181.357] Sleep (dwMilliseconds=0x3e8) [0181.360] Sleep (dwMilliseconds=0x3e8) [0181.364] Sleep (dwMilliseconds=0x3e8) [0181.386] Sleep (dwMilliseconds=0x3e8) [0181.389] Sleep (dwMilliseconds=0x3e8) [0181.391] Sleep (dwMilliseconds=0x3e8) [0181.393] Sleep (dwMilliseconds=0x3e8) [0181.395] Sleep (dwMilliseconds=0x3e8) [0181.398] Sleep (dwMilliseconds=0x3e8) [0181.401] Sleep (dwMilliseconds=0x3e8) [0181.404] Sleep (dwMilliseconds=0x3e8) [0181.427] Sleep (dwMilliseconds=0x3e8) [0181.450] Sleep (dwMilliseconds=0x3e8) [0181.478] Sleep (dwMilliseconds=0x3e8) [0181.491] Sleep (dwMilliseconds=0x3e8) [0181.492] Sleep (dwMilliseconds=0x3e8) [0181.494] Sleep (dwMilliseconds=0x3e8) [0181.497] Sleep (dwMilliseconds=0x3e8) [0181.499] Sleep (dwMilliseconds=0x3e8) [0181.509] Sleep (dwMilliseconds=0x3e8) [0181.532] Sleep (dwMilliseconds=0x3e8) [0181.556] Sleep (dwMilliseconds=0x3e8) [0181.571] Sleep (dwMilliseconds=0x3e8) [0181.575] Sleep (dwMilliseconds=0x3e8) [0181.577] Sleep (dwMilliseconds=0x3e8) [0181.579] Sleep (dwMilliseconds=0x3e8) [0181.597] Sleep (dwMilliseconds=0x3e8) [0181.600] Sleep (dwMilliseconds=0x3e8) [0181.602] Sleep (dwMilliseconds=0x3e8) [0181.603] Sleep (dwMilliseconds=0x3e8) [0181.605] Sleep (dwMilliseconds=0x3e8) [0181.609] Sleep (dwMilliseconds=0x3e8) [0181.611] Sleep (dwMilliseconds=0x3e8) [0181.613] Sleep (dwMilliseconds=0x3e8) [0181.615] Sleep (dwMilliseconds=0x3e8) [0181.617] Sleep (dwMilliseconds=0x3e8) [0181.618] Sleep (dwMilliseconds=0x3e8) [0181.632] Sleep (dwMilliseconds=0x3e8) [0181.635] Sleep (dwMilliseconds=0x3e8) [0181.642] Sleep (dwMilliseconds=0x3e8) [0181.644] Sleep (dwMilliseconds=0x3e8) [0181.646] Sleep (dwMilliseconds=0x3e8) [0181.648] Sleep (dwMilliseconds=0x3e8) [0181.651] Sleep (dwMilliseconds=0x3e8) [0181.654] Sleep (dwMilliseconds=0x3e8) [0181.658] Sleep (dwMilliseconds=0x3e8) [0181.660] Sleep (dwMilliseconds=0x3e8) [0181.662] Sleep (dwMilliseconds=0x3e8) [0181.682] Sleep (dwMilliseconds=0x3e8) [0181.684] Sleep (dwMilliseconds=0x3e8) [0181.709] Sleep (dwMilliseconds=0x3e8) [0181.729] Sleep (dwMilliseconds=0x3e8) [0181.752] Sleep (dwMilliseconds=0x3e8) [0181.779] Sleep (dwMilliseconds=0x3e8) [0181.782] Sleep (dwMilliseconds=0x3e8) [0181.785] Sleep (dwMilliseconds=0x3e8) [0181.788] Sleep (dwMilliseconds=0x3e8) [0181.789] Sleep (dwMilliseconds=0x3e8) [0181.791] Sleep (dwMilliseconds=0x3e8) [0181.794] Sleep (dwMilliseconds=0x3e8) [0181.795] Sleep (dwMilliseconds=0x3e8) [0181.799] Sleep (dwMilliseconds=0x3e8) [0181.801] Sleep (dwMilliseconds=0x3e8) [0181.805] Sleep (dwMilliseconds=0x3e8) [0181.826] Sleep (dwMilliseconds=0x3e8) [0181.830] Sleep (dwMilliseconds=0x3e8) [0181.847] Sleep (dwMilliseconds=0x3e8) [0181.874] Sleep (dwMilliseconds=0x3e8) [0181.896] Sleep (dwMilliseconds=0x3e8) [0181.914] Sleep (dwMilliseconds=0x3e8) [0181.920] Sleep (dwMilliseconds=0x3e8) [0181.923] Sleep (dwMilliseconds=0x3e8) [0181.927] Sleep (dwMilliseconds=0x3e8) [0181.929] Sleep (dwMilliseconds=0x3e8) [0181.930] Sleep (dwMilliseconds=0x3e8) [0181.934] Sleep (dwMilliseconds=0x3e8) [0181.936] Sleep (dwMilliseconds=0x3e8) [0181.938] Sleep (dwMilliseconds=0x3e8) [0181.940] Sleep (dwMilliseconds=0x3e8) [0181.960] Sleep (dwMilliseconds=0x3e8) [0181.965] Sleep (dwMilliseconds=0x3e8) [0181.967] Sleep (dwMilliseconds=0x3e8) [0181.969] Sleep (dwMilliseconds=0x3e8) [0181.971] Sleep (dwMilliseconds=0x3e8) [0181.974] Sleep (dwMilliseconds=0x3e8) [0181.976] Sleep (dwMilliseconds=0x3e8) [0181.977] Sleep (dwMilliseconds=0x3e8) [0181.979] Sleep (dwMilliseconds=0x3e8) [0181.983] Sleep (dwMilliseconds=0x3e8) [0181.985] Sleep (dwMilliseconds=0x3e8) [0181.986] Sleep (dwMilliseconds=0x3e8) [0181.988] Sleep (dwMilliseconds=0x3e8) [0182.015] Sleep (dwMilliseconds=0x3e8) [0182.040] Sleep (dwMilliseconds=0x3e8) [0182.058] Sleep (dwMilliseconds=0x3e8) [0182.060] Sleep (dwMilliseconds=0x3e8) [0182.061] Sleep (dwMilliseconds=0x3e8) [0182.085] Sleep (dwMilliseconds=0x3e8) [0182.106] Sleep (dwMilliseconds=0x3e8) [0182.129] Sleep (dwMilliseconds=0x3e8) [0182.133] Sleep (dwMilliseconds=0x3e8) [0182.136] Sleep (dwMilliseconds=0x3e8) [0182.137] Sleep (dwMilliseconds=0x3e8) [0182.140] Sleep (dwMilliseconds=0x3e8) [0182.144] Sleep (dwMilliseconds=0x3e8) [0182.145] Sleep (dwMilliseconds=0x3e8) [0182.148] Sleep (dwMilliseconds=0x3e8) [0182.149] Sleep (dwMilliseconds=0x3e8) [0182.151] Sleep (dwMilliseconds=0x3e8) [0182.153] Sleep (dwMilliseconds=0x3e8) [0182.156] Sleep (dwMilliseconds=0x3e8) [0182.160] Sleep (dwMilliseconds=0x3e8) [0182.162] Sleep (dwMilliseconds=0x3e8) [0182.183] Sleep (dwMilliseconds=0x3e8) [0182.184] Sleep (dwMilliseconds=0x3e8) [0182.206] Sleep (dwMilliseconds=0x3e8) [0182.208] Sleep (dwMilliseconds=0x3e8) [0182.210] Sleep (dwMilliseconds=0x3e8) [0182.227] Sleep (dwMilliseconds=0x3e8) [0182.229] Sleep (dwMilliseconds=0x3e8) [0182.232] Sleep (dwMilliseconds=0x3e8) [0182.233] Sleep (dwMilliseconds=0x3e8) [0182.235] Sleep (dwMilliseconds=0x3e8) [0182.238] Sleep (dwMilliseconds=0x3e8) [0182.240] Sleep (dwMilliseconds=0x3e8) [0182.245] Sleep (dwMilliseconds=0x3e8) [0182.259] Sleep (dwMilliseconds=0x3e8) [0182.260] Sleep (dwMilliseconds=0x3e8) [0182.262] Sleep (dwMilliseconds=0x3e8) [0182.265] Sleep (dwMilliseconds=0x3e8) [0182.266] Sleep (dwMilliseconds=0x3e8) [0182.273] Sleep (dwMilliseconds=0x3e8) [0182.275] Sleep (dwMilliseconds=0x3e8) [0182.276] Sleep (dwMilliseconds=0x3e8) [0182.279] Sleep (dwMilliseconds=0x3e8) [0182.280] Sleep (dwMilliseconds=0x3e8) [0182.283] Sleep (dwMilliseconds=0x3e8) [0182.285] Sleep (dwMilliseconds=0x3e8) [0182.290] Sleep (dwMilliseconds=0x3e8) [0182.291] Sleep (dwMilliseconds=0x3e8) [0182.294] Sleep (dwMilliseconds=0x3e8) [0182.296] Sleep (dwMilliseconds=0x3e8) [0182.298] Sleep (dwMilliseconds=0x3e8) [0182.301] Sleep (dwMilliseconds=0x3e8) [0182.304] Sleep (dwMilliseconds=0x3e8) [0182.306] Sleep (dwMilliseconds=0x3e8) [0182.307] Sleep (dwMilliseconds=0x3e8) [0182.309] Sleep (dwMilliseconds=0x3e8) [0182.310] Sleep (dwMilliseconds=0x3e8) [0182.312] Sleep (dwMilliseconds=0x3e8) [0182.314] Sleep (dwMilliseconds=0x3e8) [0182.318] Sleep (dwMilliseconds=0x3e8) [0182.319] Sleep (dwMilliseconds=0x3e8) [0182.322] Sleep (dwMilliseconds=0x3e8) [0182.323] Sleep (dwMilliseconds=0x3e8) [0182.325] Sleep (dwMilliseconds=0x3e8) [0182.328] Sleep (dwMilliseconds=0x3e8) [0182.329] Sleep (dwMilliseconds=0x3e8) [0182.331] Sleep (dwMilliseconds=0x3e8) [0182.332] Sleep (dwMilliseconds=0x3e8) [0182.341] Sleep (dwMilliseconds=0x3e8) [0182.343] Sleep (dwMilliseconds=0x3e8) [0182.345] Sleep (dwMilliseconds=0x3e8) [0182.346] Sleep (dwMilliseconds=0x3e8) [0182.350] Sleep (dwMilliseconds=0x3e8) [0182.353] Sleep (dwMilliseconds=0x3e8) [0182.355] Sleep (dwMilliseconds=0x3e8) [0182.357] Sleep (dwMilliseconds=0x3e8) [0182.358] Sleep (dwMilliseconds=0x3e8) [0182.360] Sleep (dwMilliseconds=0x3e8) [0182.362] Sleep (dwMilliseconds=0x3e8) [0182.365] Sleep (dwMilliseconds=0x3e8) [0182.367] Sleep (dwMilliseconds=0x3e8) [0182.368] Sleep (dwMilliseconds=0x3e8) [0182.370] Sleep (dwMilliseconds=0x3e8) [0182.374] Sleep (dwMilliseconds=0x3e8) [0182.376] Sleep (dwMilliseconds=0x3e8) [0182.378] Sleep (dwMilliseconds=0x3e8) [0182.379] Sleep (dwMilliseconds=0x3e8) [0182.381] Sleep (dwMilliseconds=0x3e8) [0182.384] Sleep (dwMilliseconds=0x3e8) [0182.388] Sleep (dwMilliseconds=0x3e8) [0182.390] Sleep (dwMilliseconds=0x3e8) [0182.391] Sleep (dwMilliseconds=0x3e8) [0182.393] Sleep (dwMilliseconds=0x3e8) [0182.396] Sleep (dwMilliseconds=0x3e8) [0182.398] Sleep (dwMilliseconds=0x3e8) [0182.399] Sleep (dwMilliseconds=0x3e8) [0182.401] Sleep (dwMilliseconds=0x3e8) [0182.403] Sleep (dwMilliseconds=0x3e8) [0182.406] Sleep (dwMilliseconds=0x3e8) [0182.407] Sleep (dwMilliseconds=0x3e8) [0182.409] Sleep (dwMilliseconds=0x3e8) [0182.412] Sleep (dwMilliseconds=0x3e8) [0182.413] Sleep (dwMilliseconds=0x3e8) [0182.415] Sleep (dwMilliseconds=0x3e8) [0182.417] Sleep (dwMilliseconds=0x3e8) [0182.419] Sleep (dwMilliseconds=0x3e8) [0182.422] Sleep (dwMilliseconds=0x3e8) [0182.423] Sleep (dwMilliseconds=0x3e8) [0182.426] Sleep (dwMilliseconds=0x3e8) [0182.428] Sleep (dwMilliseconds=0x3e8) [0182.429] Sleep (dwMilliseconds=0x3e8) [0182.431] Sleep (dwMilliseconds=0x3e8) [0182.433] Sleep (dwMilliseconds=0x3e8) [0182.435] Sleep (dwMilliseconds=0x3e8) [0182.438] Sleep (dwMilliseconds=0x3e8) [0182.439] Sleep (dwMilliseconds=0x3e8) [0182.633] Sleep (dwMilliseconds=0x3e8) [0182.634] Sleep (dwMilliseconds=0x3e8) [0182.636] Sleep (dwMilliseconds=0x3e8) [0182.638] Sleep (dwMilliseconds=0x3e8) [0182.640] Sleep (dwMilliseconds=0x3e8) [0182.642] Sleep (dwMilliseconds=0x3e8) [0182.644] Sleep (dwMilliseconds=0x3e8) [0182.647] Sleep (dwMilliseconds=0x3e8) [0182.648] Sleep (dwMilliseconds=0x3e8) [0182.650] Sleep (dwMilliseconds=0x3e8) [0182.652] Sleep (dwMilliseconds=0x3e8) [0182.654] Sleep (dwMilliseconds=0x3e8) [0182.655] Sleep (dwMilliseconds=0x3e8) [0182.659] Sleep (dwMilliseconds=0x3e8) [0182.660] Sleep (dwMilliseconds=0x3e8) [0182.662] Sleep (dwMilliseconds=0x3e8) [0182.665] Sleep (dwMilliseconds=0x3e8) [0182.667] Sleep (dwMilliseconds=0x3e8) [0182.668] Sleep (dwMilliseconds=0x3e8) [0182.671] Sleep (dwMilliseconds=0x3e8) [0182.672] Sleep (dwMilliseconds=0x3e8) [0182.675] Sleep (dwMilliseconds=0x3e8) [0182.676] Sleep (dwMilliseconds=0x3e8) [0182.678] Sleep (dwMilliseconds=0x3e8) [0182.679] Sleep (dwMilliseconds=0x3e8) [0182.680] Sleep (dwMilliseconds=0x3e8) [0182.682] Sleep (dwMilliseconds=0x3e8) [0182.686] Sleep (dwMilliseconds=0x3e8) [0182.688] Sleep (dwMilliseconds=0x3e8) [0182.689] Sleep (dwMilliseconds=0x3e8) [0182.693] Sleep (dwMilliseconds=0x3e8) [0182.694] Sleep (dwMilliseconds=0x3e8) [0182.697] Sleep (dwMilliseconds=0x3e8) [0182.698] Sleep (dwMilliseconds=0x3e8) [0182.700] Sleep (dwMilliseconds=0x3e8) [0182.702] Sleep (dwMilliseconds=0x3e8) [0182.704] Sleep (dwMilliseconds=0x3e8) [0182.706] Sleep (dwMilliseconds=0x3e8) [0182.708] Sleep (dwMilliseconds=0x3e8) [0182.710] Sleep (dwMilliseconds=0x3e8) [0182.714] Sleep (dwMilliseconds=0x3e8) [0182.716] Sleep (dwMilliseconds=0x3e8) [0182.718] Sleep (dwMilliseconds=0x3e8) [0182.719] Sleep (dwMilliseconds=0x3e8) [0182.721] Sleep (dwMilliseconds=0x3e8) [0182.724] Sleep (dwMilliseconds=0x3e8) [0182.725] Sleep (dwMilliseconds=0x3e8) [0182.727] Sleep (dwMilliseconds=0x3e8) [0182.730] Sleep (dwMilliseconds=0x3e8) [0182.733] Sleep (dwMilliseconds=0x3e8) [0182.735] Sleep (dwMilliseconds=0x3e8) [0182.748] Sleep (dwMilliseconds=0x3e8) [0182.749] Sleep (dwMilliseconds=0x3e8) [0182.752] Sleep (dwMilliseconds=0x3e8) [0182.756] Sleep (dwMilliseconds=0x3e8) [0182.764] Sleep (dwMilliseconds=0x3e8) [0182.801] Sleep (dwMilliseconds=0x3e8) [0182.803] Sleep (dwMilliseconds=0x3e8) [0182.805] Sleep (dwMilliseconds=0x3e8) [0182.809] Sleep (dwMilliseconds=0x3e8) [0182.811] Sleep (dwMilliseconds=0x3e8) [0182.812] Sleep (dwMilliseconds=0x3e8) [0182.814] Sleep (dwMilliseconds=0x3e8) [0182.816] Sleep (dwMilliseconds=0x3e8) [0182.818] Sleep (dwMilliseconds=0x3e8) [0182.820] Sleep (dwMilliseconds=0x3e8) [0182.821] Sleep (dwMilliseconds=0x3e8) [0182.823] Sleep (dwMilliseconds=0x3e8) [0182.828] Sleep (dwMilliseconds=0x3e8) [0182.830] Sleep (dwMilliseconds=0x3e8) [0182.831] Sleep (dwMilliseconds=0x3e8) [0182.833] Sleep (dwMilliseconds=0x3e8) [0182.834] Sleep (dwMilliseconds=0x3e8) [0182.838] Sleep (dwMilliseconds=0x3e8) [0182.841] Sleep (dwMilliseconds=0x3e8) [0182.843] Sleep (dwMilliseconds=0x3e8) [0182.845] Sleep (dwMilliseconds=0x3e8) [0182.847] Sleep (dwMilliseconds=0x3e8) [0182.850] Sleep (dwMilliseconds=0x3e8) [0182.851] Sleep (dwMilliseconds=0x3e8) [0182.853] Sleep (dwMilliseconds=0x3e8) [0182.855] Sleep (dwMilliseconds=0x3e8) [0182.857] Sleep (dwMilliseconds=0x3e8) [0182.860] Sleep (dwMilliseconds=0x3e8) [0182.862] Sleep (dwMilliseconds=0x3e8) [0182.864] Sleep (dwMilliseconds=0x3e8) [0182.865] Sleep (dwMilliseconds=0x3e8) [0182.867] Sleep (dwMilliseconds=0x3e8) [0182.869] Sleep (dwMilliseconds=0x3e8) [0182.872] Sleep (dwMilliseconds=0x3e8) [0182.874] Sleep (dwMilliseconds=0x3e8) [0182.875] Sleep (dwMilliseconds=0x3e8) [0182.880] Sleep (dwMilliseconds=0x3e8) [0182.881] Sleep (dwMilliseconds=0x3e8) [0182.883] Sleep (dwMilliseconds=0x3e8) [0182.886] Sleep (dwMilliseconds=0x3e8) [0182.888] Sleep (dwMilliseconds=0x3e8) [0182.890] Sleep (dwMilliseconds=0x3e8) [0182.893] Sleep (dwMilliseconds=0x3e8) [0182.895] Sleep (dwMilliseconds=0x3e8) [0182.898] Sleep (dwMilliseconds=0x3e8) [0182.900] Sleep (dwMilliseconds=0x3e8) [0182.904] Sleep (dwMilliseconds=0x3e8) [0182.905] Sleep (dwMilliseconds=0x3e8) [0182.908] Sleep (dwMilliseconds=0x3e8) [0182.910] Sleep (dwMilliseconds=0x3e8) [0182.911] Sleep (dwMilliseconds=0x3e8) [0182.913] Sleep (dwMilliseconds=0x3e8) [0182.914] Sleep (dwMilliseconds=0x3e8) [0182.916] Sleep (dwMilliseconds=0x3e8) [0182.917] Sleep (dwMilliseconds=0x3e8) [0182.919] Sleep (dwMilliseconds=0x3e8) [0182.921] Sleep (dwMilliseconds=0x3e8) [0182.925] Sleep (dwMilliseconds=0x3e8) [0182.930] Sleep (dwMilliseconds=0x3e8) [0182.942] Sleep (dwMilliseconds=0x3e8) [0182.944] Sleep (dwMilliseconds=0x3e8) [0182.947] Sleep (dwMilliseconds=0x3e8) [0182.948] Sleep (dwMilliseconds=0x3e8) [0182.950] Sleep (dwMilliseconds=0x3e8) [0182.952] Sleep (dwMilliseconds=0x3e8) [0182.954] Sleep (dwMilliseconds=0x3e8) [0182.957] Sleep (dwMilliseconds=0x3e8) [0182.958] Sleep (dwMilliseconds=0x3e8) [0182.960] Sleep (dwMilliseconds=0x3e8) [0182.963] Sleep (dwMilliseconds=0x3e8) [0182.964] Sleep (dwMilliseconds=0x3e8) [0182.966] Sleep (dwMilliseconds=0x3e8) [0182.968] Sleep (dwMilliseconds=0x3e8) [0182.971] Sleep (dwMilliseconds=0x3e8) [0182.974] Sleep (dwMilliseconds=0x3e8) [0182.976] Sleep (dwMilliseconds=0x3e8) [0182.979] Sleep (dwMilliseconds=0x3e8) [0182.981] Sleep (dwMilliseconds=0x3e8) [0182.983] Sleep (dwMilliseconds=0x3e8) [0182.985] Sleep (dwMilliseconds=0x3e8) [0182.988] Sleep (dwMilliseconds=0x3e8) [0182.989] Sleep (dwMilliseconds=0x3e8) [0182.991] Sleep (dwMilliseconds=0x3e8) [0182.993] Sleep (dwMilliseconds=0x3e8) [0182.994] Sleep (dwMilliseconds=0x3e8) [0182.997] Sleep (dwMilliseconds=0x3e8) [0182.998] Sleep (dwMilliseconds=0x3e8) [0183.000] Sleep (dwMilliseconds=0x3e8) [0183.002] Sleep (dwMilliseconds=0x3e8) [0183.004] Sleep (dwMilliseconds=0x3e8) [0183.006] Sleep (dwMilliseconds=0x3e8) [0183.008] Sleep (dwMilliseconds=0x3e8) [0183.012] Sleep (dwMilliseconds=0x3e8) [0183.014] Sleep (dwMilliseconds=0x3e8) [0183.015] Sleep (dwMilliseconds=0x3e8) [0183.021] Sleep (dwMilliseconds=0x3e8) [0183.023] Sleep (dwMilliseconds=0x3e8) [0183.025] Sleep (dwMilliseconds=0x3e8) [0183.026] Sleep (dwMilliseconds=0x3e8) [0183.028] Sleep (dwMilliseconds=0x3e8) [0183.030] Sleep (dwMilliseconds=0x3e8) [0183.033] Sleep (dwMilliseconds=0x3e8) [0183.035] Sleep (dwMilliseconds=0x3e8) [0183.036] Sleep (dwMilliseconds=0x3e8) [0183.039] Sleep (dwMilliseconds=0x3e8) [0183.040] Sleep (dwMilliseconds=0x3e8) [0183.042] Sleep (dwMilliseconds=0x3e8) [0183.045] Sleep (dwMilliseconds=0x3e8) [0183.061] Sleep (dwMilliseconds=0x3e8) [0183.067] Sleep (dwMilliseconds=0x3e8) [0183.068] Sleep (dwMilliseconds=0x3e8) [0183.070] Sleep (dwMilliseconds=0x3e8) [0183.072] Sleep (dwMilliseconds=0x3e8) [0183.074] Sleep (dwMilliseconds=0x3e8) [0183.076] Sleep (dwMilliseconds=0x3e8) [0183.078] Sleep (dwMilliseconds=0x3e8) [0183.080] Sleep (dwMilliseconds=0x3e8) [0183.083] Sleep (dwMilliseconds=0x3e8) [0183.086] Sleep (dwMilliseconds=0x3e8) [0183.087] Sleep (dwMilliseconds=0x3e8) [0183.094] Sleep (dwMilliseconds=0x3e8) [0183.097] Sleep (dwMilliseconds=0x3e8) [0183.098] Sleep (dwMilliseconds=0x3e8) [0183.100] Sleep (dwMilliseconds=0x3e8) [0183.102] Sleep (dwMilliseconds=0x3e8) [0183.104] Sleep (dwMilliseconds=0x3e8) [0183.107] Sleep (dwMilliseconds=0x3e8) [0183.109] Sleep (dwMilliseconds=0x3e8) [0183.110] Sleep (dwMilliseconds=0x3e8) [0183.112] Sleep (dwMilliseconds=0x3e8) [0183.115] Sleep (dwMilliseconds=0x3e8) [0183.117] Sleep (dwMilliseconds=0x3e8) [0183.118] Sleep (dwMilliseconds=0x3e8) [0183.121] Sleep (dwMilliseconds=0x3e8) [0183.123] Sleep (dwMilliseconds=0x3e8) [0183.128] Sleep (dwMilliseconds=0x3e8) [0183.130] Sleep (dwMilliseconds=0x3e8) [0183.133] Sleep (dwMilliseconds=0x3e8) [0183.134] Sleep (dwMilliseconds=0x3e8) [0183.136] Sleep (dwMilliseconds=0x3e8) [0183.138] Sleep (dwMilliseconds=0x3e8) [0183.140] Sleep (dwMilliseconds=0x3e8) [0183.141] Sleep (dwMilliseconds=0x3e8) [0183.143] Sleep (dwMilliseconds=0x3e8) [0183.144] Sleep (dwMilliseconds=0x3e8) [0183.145] Sleep (dwMilliseconds=0x3e8) [0183.147] Sleep (dwMilliseconds=0x3e8) [0183.150] Sleep (dwMilliseconds=0x3e8) [0183.151] Sleep (dwMilliseconds=0x3e8) [0183.153] Sleep (dwMilliseconds=0x3e8) [0183.155] Sleep (dwMilliseconds=0x3e8) [0183.158] Sleep (dwMilliseconds=0x3e8) [0183.159] Sleep (dwMilliseconds=0x3e8) [0183.161] Sleep (dwMilliseconds=0x3e8) [0183.163] Sleep (dwMilliseconds=0x3e8) [0183.165] Sleep (dwMilliseconds=0x3e8) [0183.168] Sleep (dwMilliseconds=0x3e8) [0183.169] Sleep (dwMilliseconds=0x3e8) [0183.172] Sleep (dwMilliseconds=0x3e8) [0183.175] Sleep (dwMilliseconds=0x3e8) [0183.177] Sleep (dwMilliseconds=0x3e8) [0183.178] Sleep (dwMilliseconds=0x3e8) [0183.181] Sleep (dwMilliseconds=0x3e8) [0183.182] Sleep (dwMilliseconds=0x3e8) [0183.184] Sleep (dwMilliseconds=0x3e8) [0183.186] Sleep (dwMilliseconds=0x3e8) [0183.188] Sleep (dwMilliseconds=0x3e8) [0183.189] Sleep (dwMilliseconds=0x3e8) [0183.194] Sleep (dwMilliseconds=0x3e8) [0183.195] Sleep (dwMilliseconds=0x3e8) [0183.198] Sleep (dwMilliseconds=0x3e8) [0183.200] Sleep (dwMilliseconds=0x3e8) [0183.201] Sleep (dwMilliseconds=0x3e8) [0183.204] Sleep (dwMilliseconds=0x3e8) [0183.206] Sleep (dwMilliseconds=0x3e8) [0183.208] Sleep (dwMilliseconds=0x3e8) [0183.210] Sleep (dwMilliseconds=0x3e8) [0183.212] Sleep (dwMilliseconds=0x3e8) [0183.215] Sleep (dwMilliseconds=0x3e8) [0183.218] Sleep (dwMilliseconds=0x3e8) [0183.219] Sleep (dwMilliseconds=0x3e8) [0183.221] Sleep (dwMilliseconds=0x3e8) [0183.223] Sleep (dwMilliseconds=0x3e8) [0183.226] Sleep (dwMilliseconds=0x3e8) [0183.228] Sleep (dwMilliseconds=0x3e8) [0183.229] Sleep (dwMilliseconds=0x3e8) [0183.231] Sleep (dwMilliseconds=0x3e8) [0183.234] Sleep (dwMilliseconds=0x3e8) [0183.236] Sleep (dwMilliseconds=0x3e8) [0183.237] Sleep (dwMilliseconds=0x3e8) [0183.239] Sleep (dwMilliseconds=0x3e8) [0183.242] Sleep (dwMilliseconds=0x3e8) [0183.901] Sleep (dwMilliseconds=0x3e8) [0183.902] Sleep (dwMilliseconds=0x3e8) [0183.904] Sleep (dwMilliseconds=0x3e8) [0183.911] Sleep (dwMilliseconds=0x3e8) [0183.912] Sleep (dwMilliseconds=0x3e8) [0183.914] Sleep (dwMilliseconds=0x3e8) [0183.917] Sleep (dwMilliseconds=0x3e8) [0183.918] Sleep (dwMilliseconds=0x3e8) [0183.921] Sleep (dwMilliseconds=0x3e8) [0183.923] Sleep (dwMilliseconds=0x3e8) [0183.924] Sleep (dwMilliseconds=0x3e8) [0183.926] Sleep (dwMilliseconds=0x3e8) [0183.929] Sleep (dwMilliseconds=0x3e8) [0183.931] Sleep (dwMilliseconds=0x3e8) [0183.932] Sleep (dwMilliseconds=0x3e8) [0183.934] Sleep (dwMilliseconds=0x3e8) [0183.937] Sleep (dwMilliseconds=0x3e8) [0183.939] Sleep (dwMilliseconds=0x3e8) [0183.941] Sleep (dwMilliseconds=0x3e8) [0183.943] Sleep (dwMilliseconds=0x3e8) [0183.945] Sleep (dwMilliseconds=0x3e8) [0183.946] Sleep (dwMilliseconds=0x3e8) [0183.947] Sleep (dwMilliseconds=0x3e8) [0183.949] Sleep (dwMilliseconds=0x3e8) [0183.951] Sleep (dwMilliseconds=0x3e8) [0183.954] Sleep (dwMilliseconds=0x3e8) [0183.956] Sleep (dwMilliseconds=0x3e8) [0183.958] Sleep (dwMilliseconds=0x3e8) [0183.960] Sleep (dwMilliseconds=0x3e8) [0183.961] Sleep (dwMilliseconds=0x3e8) [0183.964] Sleep (dwMilliseconds=0x3e8) [0183.966] Sleep (dwMilliseconds=0x3e8) [0183.969] Sleep (dwMilliseconds=0x3e8) [0183.971] Sleep (dwMilliseconds=0x3e8) [0183.972] Sleep (dwMilliseconds=0x3e8) [0183.975] Sleep (dwMilliseconds=0x3e8) [0183.977] Sleep (dwMilliseconds=0x3e8) [0183.979] Sleep (dwMilliseconds=0x3e8) [0183.981] Sleep (dwMilliseconds=0x3e8) [0183.982] Sleep (dwMilliseconds=0x3e8) [0183.984] Sleep (dwMilliseconds=0x3e8) [0183.986] Sleep (dwMilliseconds=0x3e8) [0183.987] Sleep (dwMilliseconds=0x3e8) [0183.989] Sleep (dwMilliseconds=0x3e8) [0183.992] Sleep (dwMilliseconds=0x3e8) [0183.993] Sleep (dwMilliseconds=0x3e8) [0183.995] Sleep (dwMilliseconds=0x3e8) [0184.366] Sleep (dwMilliseconds=0x3e8) [0184.369] Sleep (dwMilliseconds=0x3e8) [0184.370] Sleep (dwMilliseconds=0x3e8) [0184.371] Sleep (dwMilliseconds=0x3e8) [0184.373] Sleep (dwMilliseconds=0x3e8) [0184.375] Sleep (dwMilliseconds=0x3e8) [0184.377] Sleep (dwMilliseconds=0x3e8) [0184.520] Sleep (dwMilliseconds=0x3e8) [0184.521] Sleep (dwMilliseconds=0x3e8) [0184.524] Sleep (dwMilliseconds=0x3e8) [0184.525] Sleep (dwMilliseconds=0x3e8) [0184.527] Sleep (dwMilliseconds=0x3e8) [0184.528] Sleep (dwMilliseconds=0x3e8) [0184.529] Sleep (dwMilliseconds=0x3e8) [0184.531] Sleep (dwMilliseconds=0x3e8) [0184.533] Sleep (dwMilliseconds=0x3e8) [0184.536] Sleep (dwMilliseconds=0x3e8) [0184.537] Sleep (dwMilliseconds=0x3e8) [0184.540] Sleep (dwMilliseconds=0x3e8) [0184.541] Sleep (dwMilliseconds=0x3e8) [0184.562] Sleep (dwMilliseconds=0x3e8) [0184.570] Sleep (dwMilliseconds=0x3e8) [0184.571] Sleep (dwMilliseconds=0x3e8) [0184.573] Sleep (dwMilliseconds=0x3e8) [0184.576] Sleep (dwMilliseconds=0x3e8) [0184.583] Sleep (dwMilliseconds=0x3e8) [0184.586] Sleep (dwMilliseconds=0x3e8) [0184.587] Sleep (dwMilliseconds=0x3e8) [0184.589] Sleep (dwMilliseconds=0x3e8) [0184.592] Sleep (dwMilliseconds=0x3e8) [0184.593] Sleep (dwMilliseconds=0x3e8) [0184.596] Sleep (dwMilliseconds=0x3e8) [0184.598] Sleep (dwMilliseconds=0x3e8) [0184.599] Sleep (dwMilliseconds=0x3e8) [0184.602] Sleep (dwMilliseconds=0x3e8) [0184.603] Sleep (dwMilliseconds=0x3e8) [0184.605] Sleep (dwMilliseconds=0x3e8) [0184.607] Sleep (dwMilliseconds=0x3e8) [0184.609] Sleep (dwMilliseconds=0x3e8) [0184.611] Sleep (dwMilliseconds=0x3e8) [0184.613] Sleep (dwMilliseconds=0x3e8) [0184.615] Sleep (dwMilliseconds=0x3e8) [0184.617] Sleep (dwMilliseconds=0x3e8) [0184.620] Sleep (dwMilliseconds=0x3e8) [0184.621] Sleep (dwMilliseconds=0x3e8) [0184.624] Sleep (dwMilliseconds=0x3e8) [0184.626] Sleep (dwMilliseconds=0x3e8) [0184.628] Sleep (dwMilliseconds=0x3e8) [0184.630] Sleep (dwMilliseconds=0x3e8) [0184.635] Sleep (dwMilliseconds=0x3e8) [0184.638] Sleep (dwMilliseconds=0x3e8) [0184.639] Sleep (dwMilliseconds=0x3e8) [0184.641] Sleep (dwMilliseconds=0x3e8) [0184.643] Sleep (dwMilliseconds=0x3e8) [0184.645] Sleep (dwMilliseconds=0x3e8) [0184.691] Sleep (dwMilliseconds=0x3e8) [0184.693] Sleep (dwMilliseconds=0x3e8) [0184.696] Sleep (dwMilliseconds=0x3e8) [0184.697] Sleep (dwMilliseconds=0x3e8) [0184.699] Sleep (dwMilliseconds=0x3e8) [0184.701] Sleep (dwMilliseconds=0x3e8) [0184.703] Sleep (dwMilliseconds=0x3e8) [0184.707] Sleep (dwMilliseconds=0x3e8) [0184.711] Sleep (dwMilliseconds=0x3e8) [0184.714] Sleep (dwMilliseconds=0x3e8) [0184.715] Sleep (dwMilliseconds=0x3e8) [0184.717] Sleep (dwMilliseconds=0x3e8) [0184.721] Sleep (dwMilliseconds=0x3e8) [0184.722] Sleep (dwMilliseconds=0x3e8) [0184.726] Sleep (dwMilliseconds=0x3e8) [0184.729] Sleep (dwMilliseconds=0x3e8) [0184.730] Sleep (dwMilliseconds=0x3e8) [0184.732] Sleep (dwMilliseconds=0x3e8) [0184.735] Sleep (dwMilliseconds=0x3e8) [0184.737] Sleep (dwMilliseconds=0x3e8) [0184.738] Sleep (dwMilliseconds=0x3e8) [0184.741] Sleep (dwMilliseconds=0x3e8) [0184.744] Sleep (dwMilliseconds=0x3e8) [0184.746] Sleep (dwMilliseconds=0x3e8) [0184.748] Sleep (dwMilliseconds=0x3e8) [0184.751] Sleep (dwMilliseconds=0x3e8) [0184.752] Sleep (dwMilliseconds=0x3e8) [0184.754] Sleep (dwMilliseconds=0x3e8) [0184.756] Sleep (dwMilliseconds=0x3e8) [0184.759] Sleep (dwMilliseconds=0x3e8) [0184.760] Sleep (dwMilliseconds=0x3e8) [0184.763] Sleep (dwMilliseconds=0x3e8) [0184.764] Sleep (dwMilliseconds=0x3e8) [0184.767] Sleep (dwMilliseconds=0x3e8) [0184.768] Sleep (dwMilliseconds=0x3e8) [0184.770] Sleep (dwMilliseconds=0x3e8) [0184.772] Sleep (dwMilliseconds=0x3e8) [0184.777] Sleep (dwMilliseconds=0x3e8) [0184.785] Sleep (dwMilliseconds=0x3e8) [0184.788] Sleep (dwMilliseconds=0x3e8) [0184.789] Sleep (dwMilliseconds=0x3e8) [0184.792] Sleep (dwMilliseconds=0x3e8) [0184.794] Sleep (dwMilliseconds=0x3e8) [0184.795] Sleep (dwMilliseconds=0x3e8) [0184.800] Sleep (dwMilliseconds=0x3e8) [0184.802] Sleep (dwMilliseconds=0x3e8) [0184.803] Sleep (dwMilliseconds=0x3e8) [0184.812] Sleep (dwMilliseconds=0x3e8) [0184.814] Sleep (dwMilliseconds=0x3e8) [0184.816] Sleep (dwMilliseconds=0x3e8) [0184.831] Sleep (dwMilliseconds=0x3e8) [0184.833] Sleep (dwMilliseconds=0x3e8) [0184.835] Sleep (dwMilliseconds=0x3e8) [0184.838] Sleep (dwMilliseconds=0x3e8) [0184.839] Sleep (dwMilliseconds=0x3e8) [0184.842] Sleep (dwMilliseconds=0x3e8) [0184.843] Sleep (dwMilliseconds=0x3e8) [0184.845] Sleep (dwMilliseconds=0x3e8) [0184.847] Sleep (dwMilliseconds=0x3e8) [0184.849] Sleep (dwMilliseconds=0x3e8) [0184.852] Sleep (dwMilliseconds=0x3e8) [0184.853] Sleep (dwMilliseconds=0x3e8) [0184.855] Sleep (dwMilliseconds=0x3e8) [0184.857] Sleep (dwMilliseconds=0x3e8) [0184.859] Sleep (dwMilliseconds=0x3e8) [0185.300] Sleep (dwMilliseconds=0x3e8) [0185.303] Sleep (dwMilliseconds=0x3e8) [0185.304] Sleep (dwMilliseconds=0x3e8) [0185.307] Sleep (dwMilliseconds=0x3e8) [0185.311] Sleep (dwMilliseconds=0x3e8) [0185.333] Sleep (dwMilliseconds=0x3e8) [0185.335] Sleep (dwMilliseconds=0x3e8) [0185.338] Sleep (dwMilliseconds=0x3e8) [0185.341] Sleep (dwMilliseconds=0x3e8) [0185.342] Sleep (dwMilliseconds=0x3e8) [0185.344] Sleep (dwMilliseconds=0x3e8) [0185.346] Sleep (dwMilliseconds=0x3e8) [0185.348] Sleep (dwMilliseconds=0x3e8) [0185.349] Sleep (dwMilliseconds=0x3e8) [0185.352] Sleep (dwMilliseconds=0x3e8) [0185.354] Sleep (dwMilliseconds=0x3e8) [0185.355] Sleep (dwMilliseconds=0x3e8) [0185.361] Sleep (dwMilliseconds=0x3e8) [0185.362] Sleep (dwMilliseconds=0x3e8) [0185.365] Sleep (dwMilliseconds=0x3e8) [0185.366] Sleep (dwMilliseconds=0x3e8) [0185.369] Sleep (dwMilliseconds=0x3e8) [0185.370] Sleep (dwMilliseconds=0x3e8) [0185.379] Sleep (dwMilliseconds=0x3e8) [0185.381] Sleep (dwMilliseconds=0x3e8) [0185.384] Sleep (dwMilliseconds=0x3e8) [0185.385] Sleep (dwMilliseconds=0x3e8) [0185.387] Sleep (dwMilliseconds=0x3e8) [0185.388] Sleep (dwMilliseconds=0x3e8) [0185.391] Sleep (dwMilliseconds=0x3e8) [0185.393] Sleep (dwMilliseconds=0x3e8) [0185.395] Sleep (dwMilliseconds=0x3e8) [0185.399] Sleep (dwMilliseconds=0x3e8) [0185.400] Sleep (dwMilliseconds=0x3e8) [0185.403] Sleep (dwMilliseconds=0x3e8) [0185.405] Sleep (dwMilliseconds=0x3e8) [0185.406] Sleep (dwMilliseconds=0x3e8) [0185.409] Sleep (dwMilliseconds=0x3e8) [0185.411] Sleep (dwMilliseconds=0x3e8) [0185.413] Sleep (dwMilliseconds=0x3e8) [0185.414] Sleep (dwMilliseconds=0x3e8) [0185.416] Sleep (dwMilliseconds=0x3e8) [0185.418] Sleep (dwMilliseconds=0x3e8) [0185.420] Sleep (dwMilliseconds=0x3e8) [0185.423] Sleep (dwMilliseconds=0x3e8) [0185.424] Sleep (dwMilliseconds=0x3e8) [0185.426] Sleep (dwMilliseconds=0x3e8) [0185.428] Sleep (dwMilliseconds=0x3e8) [0185.586] Sleep (dwMilliseconds=0x3e8) [0185.587] Sleep (dwMilliseconds=0x3e8) [0185.590] Sleep (dwMilliseconds=0x3e8) [0185.592] Sleep (dwMilliseconds=0x3e8) [0185.594] Sleep (dwMilliseconds=0x3e8) [0185.596] Sleep (dwMilliseconds=0x3e8) [0185.598] Sleep (dwMilliseconds=0x3e8) [0185.600] Sleep (dwMilliseconds=0x3e8) [0185.601] Sleep (dwMilliseconds=0x3e8) [0185.604] Sleep (dwMilliseconds=0x3e8) [0185.606] Sleep (dwMilliseconds=0x3e8) [0185.608] Sleep (dwMilliseconds=0x3e8) [0185.609] Sleep (dwMilliseconds=0x3e8) [0185.619] Sleep (dwMilliseconds=0x3e8) [0185.621] Sleep (dwMilliseconds=0x3e8) [0185.622] Sleep (dwMilliseconds=0x3e8) [0185.629] Sleep (dwMilliseconds=0x3e8) [0185.632] Sleep (dwMilliseconds=0x3e8) [0185.641] Sleep (dwMilliseconds=0x3e8) [0185.675] Sleep (dwMilliseconds=0x3e8) [0185.679] Sleep (dwMilliseconds=0x3e8) [0185.681] Sleep (dwMilliseconds=0x3e8) [0185.687] Sleep (dwMilliseconds=0x3e8) [0185.688] Sleep (dwMilliseconds=0x3e8) [0185.690] Sleep (dwMilliseconds=0x3e8) [0185.692] Sleep (dwMilliseconds=0x3e8) [0185.694] Sleep (dwMilliseconds=0x3e8) [0185.696] Sleep (dwMilliseconds=0x3e8) [0185.699] Sleep (dwMilliseconds=0x3e8) [0185.713] Sleep (dwMilliseconds=0x3e8) [0185.714] Sleep (dwMilliseconds=0x3e8) [0185.721] Sleep (dwMilliseconds=0x3e8) [0185.725] Sleep (dwMilliseconds=0x3e8) [0185.729] Sleep (dwMilliseconds=0x3e8) [0185.730] Sleep (dwMilliseconds=0x3e8) [0185.737] Sleep (dwMilliseconds=0x3e8) [0185.739] Sleep (dwMilliseconds=0x3e8) [0185.741] Sleep (dwMilliseconds=0x3e8) [0185.743] Sleep (dwMilliseconds=0x3e8) [0185.751] Sleep (dwMilliseconds=0x3e8) [0185.753] Sleep (dwMilliseconds=0x3e8) [0185.756] Sleep (dwMilliseconds=0x3e8) [0185.757] Sleep (dwMilliseconds=0x3e8) [0185.759] Sleep (dwMilliseconds=0x3e8) [0185.762] Sleep (dwMilliseconds=0x3e8) [0185.769] Sleep (dwMilliseconds=0x3e8) [0185.772] Sleep (dwMilliseconds=0x3e8) [0185.774] Sleep (dwMilliseconds=0x3e8) [0185.776] Sleep (dwMilliseconds=0x3e8) [0185.781] Sleep (dwMilliseconds=0x3e8) [0185.784] Sleep (dwMilliseconds=0x3e8) [0185.787] Sleep (dwMilliseconds=0x3e8) [0185.788] Sleep (dwMilliseconds=0x3e8) [0185.790] Sleep (dwMilliseconds=0x3e8) [0185.793] Sleep (dwMilliseconds=0x3e8) [0185.795] Sleep (dwMilliseconds=0x3e8) [0185.806] Sleep (dwMilliseconds=0x3e8) [0185.807] Sleep (dwMilliseconds=0x3e8) [0185.810] Sleep (dwMilliseconds=0x3e8) [0185.811] Sleep (dwMilliseconds=0x3e8) [0185.948] Sleep (dwMilliseconds=0x3e8) [0185.949] Sleep (dwMilliseconds=0x3e8) [0185.951] Sleep (dwMilliseconds=0x3e8) [0186.041] Sleep (dwMilliseconds=0x3e8) [0186.046] Sleep (dwMilliseconds=0x3e8) [0186.048] Sleep (dwMilliseconds=0x3e8) [0186.050] Sleep (dwMilliseconds=0x3e8) [0186.052] Sleep (dwMilliseconds=0x3e8) [0186.054] Sleep (dwMilliseconds=0x3e8) [0186.056] Sleep (dwMilliseconds=0x3e8) [0186.059] Sleep (dwMilliseconds=0x3e8) [0186.060] Sleep (dwMilliseconds=0x3e8) [0186.063] Sleep (dwMilliseconds=0x3e8) [0186.065] Sleep (dwMilliseconds=0x3e8) [0186.066] Sleep (dwMilliseconds=0x3e8) [0186.068] Sleep (dwMilliseconds=0x3e8) [0186.070] Sleep (dwMilliseconds=0x3e8) [0186.072] Sleep (dwMilliseconds=0x3e8) [0186.073] Sleep (dwMilliseconds=0x3e8) [0186.075] Sleep (dwMilliseconds=0x3e8) [0186.076] Sleep (dwMilliseconds=0x3e8) [0186.078] Sleep (dwMilliseconds=0x3e8) [0186.079] Sleep (dwMilliseconds=0x3e8) [0186.081] Sleep (dwMilliseconds=0x3e8) [0186.082] Sleep (dwMilliseconds=0x3e8) [0186.084] Sleep (dwMilliseconds=0x3e8) [0186.089] Sleep (dwMilliseconds=0x3e8) [0186.091] Sleep (dwMilliseconds=0x3e8) [0186.093] Sleep (dwMilliseconds=0x3e8) [0186.095] Sleep (dwMilliseconds=0x3e8) [0186.097] Sleep (dwMilliseconds=0x3e8) [0186.100] Sleep (dwMilliseconds=0x3e8) [0186.104] Sleep (dwMilliseconds=0x3e8) [0186.105] Sleep (dwMilliseconds=0x3e8) [0186.109] Sleep (dwMilliseconds=0x3e8) [0186.110] Sleep (dwMilliseconds=0x3e8) [0186.113] Sleep (dwMilliseconds=0x3e8) [0186.115] Sleep (dwMilliseconds=0x3e8) [0186.116] Sleep (dwMilliseconds=0x3e8) [0186.118] Sleep (dwMilliseconds=0x3e8) [0186.119] Sleep (dwMilliseconds=0x3e8) [0186.123] Sleep (dwMilliseconds=0x3e8) [0186.124] Sleep (dwMilliseconds=0x3e8) [0186.126] Sleep (dwMilliseconds=0x3e8) [0186.128] Sleep (dwMilliseconds=0x3e8) [0186.129] Sleep (dwMilliseconds=0x3e8) [0186.131] Sleep (dwMilliseconds=0x3e8) [0186.132] Sleep (dwMilliseconds=0x3e8) [0186.134] Sleep (dwMilliseconds=0x3e8) [0186.136] Sleep (dwMilliseconds=0x3e8) [0186.137] Sleep (dwMilliseconds=0x3e8) [0186.138] Sleep (dwMilliseconds=0x3e8) [0186.141] Sleep (dwMilliseconds=0x3e8) [0186.143] Sleep (dwMilliseconds=0x3e8) [0186.144] Sleep (dwMilliseconds=0x3e8) [0186.146] Sleep (dwMilliseconds=0x3e8) [0186.147] Sleep (dwMilliseconds=0x3e8) [0186.149] Sleep (dwMilliseconds=0x3e8) [0186.150] Sleep (dwMilliseconds=0x3e8) [0186.156] Sleep (dwMilliseconds=0x3e8) [0186.158] Sleep (dwMilliseconds=0x3e8) [0186.159] Sleep (dwMilliseconds=0x3e8) [0186.161] Sleep (dwMilliseconds=0x3e8) [0186.162] Sleep (dwMilliseconds=0x3e8) [0186.163] Sleep (dwMilliseconds=0x3e8) [0186.165] Sleep (dwMilliseconds=0x3e8) [0186.166] Sleep (dwMilliseconds=0x3e8) [0186.168] Sleep (dwMilliseconds=0x3e8) [0186.169] Sleep (dwMilliseconds=0x3e8) [0186.171] Sleep (dwMilliseconds=0x3e8) [0186.172] Sleep (dwMilliseconds=0x3e8) [0186.174] Sleep (dwMilliseconds=0x3e8) [0186.176] Sleep (dwMilliseconds=0x3e8) [0186.177] Sleep (dwMilliseconds=0x3e8) [0186.178] Sleep (dwMilliseconds=0x3e8) [0186.180] Sleep (dwMilliseconds=0x3e8) [0186.186] Sleep (dwMilliseconds=0x3e8) [0186.188] Sleep (dwMilliseconds=0x3e8) [0186.189] Sleep (dwMilliseconds=0x3e8) [0186.191] Sleep (dwMilliseconds=0x3e8) [0186.227] Sleep (dwMilliseconds=0x3e8) [0186.229] Sleep (dwMilliseconds=0x3e8) [0186.230] Sleep (dwMilliseconds=0x3e8) [0186.232] Sleep (dwMilliseconds=0x3e8) [0186.233] Sleep (dwMilliseconds=0x3e8) [0186.235] Sleep (dwMilliseconds=0x3e8) [0186.236] Sleep (dwMilliseconds=0x3e8) [0186.238] Sleep (dwMilliseconds=0x3e8) [0186.240] Sleep (dwMilliseconds=0x3e8) [0186.242] Sleep (dwMilliseconds=0x3e8) [0186.243] Sleep (dwMilliseconds=0x3e8) [0186.245] Sleep (dwMilliseconds=0x3e8) [0186.246] Sleep (dwMilliseconds=0x3e8) [0186.252] Sleep (dwMilliseconds=0x3e8) [0186.253] Sleep (dwMilliseconds=0x3e8) [0186.255] Sleep (dwMilliseconds=0x3e8) [0186.256] Sleep (dwMilliseconds=0x3e8) [0186.258] Sleep (dwMilliseconds=0x3e8) [0186.259] Sleep (dwMilliseconds=0x3e8) [0186.261] Sleep (dwMilliseconds=0x3e8) [0186.262] Sleep (dwMilliseconds=0x3e8) [0186.264] Sleep (dwMilliseconds=0x3e8) [0186.265] Sleep (dwMilliseconds=0x3e8) [0186.276] Sleep (dwMilliseconds=0x3e8) [0186.277] Sleep (dwMilliseconds=0x3e8) [0186.279] Sleep (dwMilliseconds=0x3e8) [0186.281] Sleep (dwMilliseconds=0x3e8) [0186.283] Sleep (dwMilliseconds=0x3e8) [0186.365] Sleep (dwMilliseconds=0x3e8) [0186.367] Sleep (dwMilliseconds=0x3e8) [0186.368] Sleep (dwMilliseconds=0x3e8) [0186.370] Sleep (dwMilliseconds=0x3e8) [0186.371] Sleep (dwMilliseconds=0x3e8) [0186.373] Sleep (dwMilliseconds=0x3e8) [0186.375] Sleep (dwMilliseconds=0x3e8) [0186.380] Sleep (dwMilliseconds=0x3e8) [0186.425] Sleep (dwMilliseconds=0x3e8) [0186.427] Sleep (dwMilliseconds=0x3e8) [0186.429] Sleep (dwMilliseconds=0x3e8) [0186.432] Sleep (dwMilliseconds=0x3e8) [0186.433] Sleep (dwMilliseconds=0x3e8) [0186.435] Sleep (dwMilliseconds=0x3e8) [0186.436] Sleep (dwMilliseconds=0x3e8) [0186.438] Sleep (dwMilliseconds=0x3e8) [0186.442] Sleep (dwMilliseconds=0x3e8) [0186.443] Sleep (dwMilliseconds=0x3e8) [0186.444] Sleep (dwMilliseconds=0x3e8) [0186.450] Sleep (dwMilliseconds=0x3e8) [0186.451] Sleep (dwMilliseconds=0x3e8) [0186.452] Sleep (dwMilliseconds=0x3e8) [0186.454] Sleep (dwMilliseconds=0x3e8) [0186.455] Sleep (dwMilliseconds=0x3e8) [0186.457] Sleep (dwMilliseconds=0x3e8) [0186.459] Sleep (dwMilliseconds=0x3e8) [0186.460] Sleep (dwMilliseconds=0x3e8) [0186.463] Sleep (dwMilliseconds=0x3e8) [0186.464] Sleep (dwMilliseconds=0x3e8) [0186.466] Sleep (dwMilliseconds=0x3e8) [0186.467] Sleep (dwMilliseconds=0x3e8) [0186.469] Sleep (dwMilliseconds=0x3e8) [0186.470] Sleep (dwMilliseconds=0x3e8) [0186.471] Sleep (dwMilliseconds=0x3e8) [0186.473] Sleep (dwMilliseconds=0x3e8) [0186.475] Sleep (dwMilliseconds=0x3e8) [0186.477] Sleep (dwMilliseconds=0x3e8) [0186.479] Sleep (dwMilliseconds=0x3e8) [0186.480] Sleep (dwMilliseconds=0x3e8) [0186.482] Sleep (dwMilliseconds=0x3e8) [0186.484] Sleep (dwMilliseconds=0x3e8) [0186.485] Sleep (dwMilliseconds=0x3e8) [0186.487] Sleep (dwMilliseconds=0x3e8) [0186.490] Sleep (dwMilliseconds=0x3e8) [0186.491] Sleep (dwMilliseconds=0x3e8) [0186.493] Sleep (dwMilliseconds=0x3e8) [0186.494] Sleep (dwMilliseconds=0x3e8) [0186.497] Sleep (dwMilliseconds=0x3e8) [0186.499] Sleep (dwMilliseconds=0x3e8) [0186.500] Sleep (dwMilliseconds=0x3e8) [0186.502] Sleep (dwMilliseconds=0x3e8) [0186.504] Sleep (dwMilliseconds=0x3e8) [0186.505] Sleep (dwMilliseconds=0x3e8) [0186.506] Sleep (dwMilliseconds=0x3e8) [0186.508] Sleep (dwMilliseconds=0x3e8) [0186.509] Sleep (dwMilliseconds=0x3e8) [0186.511] Sleep (dwMilliseconds=0x3e8) [0186.512] Sleep (dwMilliseconds=0x3e8) [0186.514] Sleep (dwMilliseconds=0x3e8) [0186.515] Sleep (dwMilliseconds=0x3e8) [0186.517] Sleep (dwMilliseconds=0x3e8) [0186.518] Sleep (dwMilliseconds=0x3e8) [0186.520] Sleep (dwMilliseconds=0x3e8) [0186.521] Sleep (dwMilliseconds=0x3e8) [0186.523] Sleep (dwMilliseconds=0x3e8) [0186.525] Sleep (dwMilliseconds=0x3e8) [0186.528] Sleep (dwMilliseconds=0x3e8) [0186.530] Sleep (dwMilliseconds=0x3e8) [0186.532] Sleep (dwMilliseconds=0x3e8) [0186.533] Sleep (dwMilliseconds=0x3e8) [0186.535] Sleep (dwMilliseconds=0x3e8) [0186.536] Sleep (dwMilliseconds=0x3e8) [0186.538] Sleep (dwMilliseconds=0x3e8) [0186.541] Sleep (dwMilliseconds=0x3e8) [0186.542] Sleep (dwMilliseconds=0x3e8) [0186.543] Sleep (dwMilliseconds=0x3e8) [0186.545] Sleep (dwMilliseconds=0x3e8) [0186.546] Sleep (dwMilliseconds=0x3e8) [0186.548] Sleep (dwMilliseconds=0x3e8) [0186.549] Sleep (dwMilliseconds=0x3e8) [0186.552] Sleep (dwMilliseconds=0x3e8) [0186.553] Sleep (dwMilliseconds=0x3e8) [0186.555] Sleep (dwMilliseconds=0x3e8) [0186.557] Sleep (dwMilliseconds=0x3e8) [0186.558] Sleep (dwMilliseconds=0x3e8) [0186.579] Sleep (dwMilliseconds=0x3e8) [0186.580] Sleep (dwMilliseconds=0x3e8) [0186.582] Sleep (dwMilliseconds=0x3e8) [0186.583] Sleep (dwMilliseconds=0x3e8) [0186.585] Sleep (dwMilliseconds=0x3e8) [0186.586] Sleep (dwMilliseconds=0x3e8) [0186.588] Sleep (dwMilliseconds=0x3e8) [0186.591] Sleep (dwMilliseconds=0x3e8) [0186.593] Sleep (dwMilliseconds=0x3e8) [0186.595] Sleep (dwMilliseconds=0x3e8) [0186.599] Sleep (dwMilliseconds=0x3e8) [0186.600] Sleep (dwMilliseconds=0x3e8) [0186.601] Sleep (dwMilliseconds=0x3e8) [0186.603] Sleep (dwMilliseconds=0x3e8) [0186.608] Sleep (dwMilliseconds=0x3e8) [0186.610] Sleep (dwMilliseconds=0x3e8) [0186.611] Sleep (dwMilliseconds=0x3e8) [0186.613] Sleep (dwMilliseconds=0x3e8) [0186.614] Sleep (dwMilliseconds=0x3e8) [0186.616] Sleep (dwMilliseconds=0x3e8) [0186.618] Sleep (dwMilliseconds=0x3e8) [0186.619] Sleep (dwMilliseconds=0x3e8) [0186.621] Sleep (dwMilliseconds=0x3e8) [0186.623] Sleep (dwMilliseconds=0x3e8) [0186.624] Sleep (dwMilliseconds=0x3e8) [0186.625] Sleep (dwMilliseconds=0x3e8) [0186.627] Sleep (dwMilliseconds=0x3e8) [0186.628] Sleep (dwMilliseconds=0x3e8) [0186.630] Sleep (dwMilliseconds=0x3e8) [0186.676] Sleep (dwMilliseconds=0x3e8) [0186.678] Sleep (dwMilliseconds=0x3e8) [0186.679] Sleep (dwMilliseconds=0x3e8) [0186.681] Sleep (dwMilliseconds=0x3e8) [0186.682] Sleep (dwMilliseconds=0x3e8) [0186.683] Sleep (dwMilliseconds=0x3e8) [0186.685] Sleep (dwMilliseconds=0x3e8) [0186.687] Sleep (dwMilliseconds=0x3e8) [0186.688] Sleep (dwMilliseconds=0x3e8) [0186.690] Sleep (dwMilliseconds=0x3e8) [0186.691] Sleep (dwMilliseconds=0x3e8) [0186.693] Sleep (dwMilliseconds=0x3e8) [0186.694] Sleep (dwMilliseconds=0x3e8) [0186.697] Sleep (dwMilliseconds=0x3e8) [0186.698] Sleep (dwMilliseconds=0x3e8) [0186.700] Sleep (dwMilliseconds=0x3e8) [0186.701] Sleep (dwMilliseconds=0x3e8) [0186.703] Sleep (dwMilliseconds=0x3e8) [0186.704] Sleep (dwMilliseconds=0x3e8) [0186.706] Sleep (dwMilliseconds=0x3e8) [0186.707] Sleep (dwMilliseconds=0x3e8) [0186.709] Sleep (dwMilliseconds=0x3e8) [0186.710] Sleep (dwMilliseconds=0x3e8) [0186.712] Sleep (dwMilliseconds=0x3e8) [0186.713] Sleep (dwMilliseconds=0x3e8) [0186.715] Sleep (dwMilliseconds=0x3e8) [0186.716] Sleep (dwMilliseconds=0x3e8) [0186.718] Sleep (dwMilliseconds=0x3e8) [0186.721] Sleep (dwMilliseconds=0x3e8) [0186.722] Sleep (dwMilliseconds=0x3e8) [0186.724] Sleep (dwMilliseconds=0x3e8) [0186.726] Sleep (dwMilliseconds=0x3e8) [0186.728] Sleep (dwMilliseconds=0x3e8) [0186.729] Sleep (dwMilliseconds=0x3e8) [0186.731] Sleep (dwMilliseconds=0x3e8) [0186.732] Sleep (dwMilliseconds=0x3e8) [0186.735] Sleep (dwMilliseconds=0x3e8) [0186.736] Sleep (dwMilliseconds=0x3e8) [0186.739] Sleep (dwMilliseconds=0x3e8) [0186.744] Sleep (dwMilliseconds=0x3e8) [0186.745] Sleep (dwMilliseconds=0x3e8) [0186.747] Sleep (dwMilliseconds=0x3e8) [0186.748] Sleep (dwMilliseconds=0x3e8) [0186.752] Sleep (dwMilliseconds=0x3e8) [0186.754] Sleep (dwMilliseconds=0x3e8) [0186.755] Sleep (dwMilliseconds=0x3e8) [0186.757] Sleep (dwMilliseconds=0x3e8) [0186.758] Sleep (dwMilliseconds=0x3e8) [0186.760] Sleep (dwMilliseconds=0x3e8) [0186.761] Sleep (dwMilliseconds=0x3e8) [0186.763] Sleep (dwMilliseconds=0x3e8) [0186.764] Sleep (dwMilliseconds=0x3e8) [0186.766] Sleep (dwMilliseconds=0x3e8) [0186.767] Sleep (dwMilliseconds=0x3e8) [0186.769] Sleep (dwMilliseconds=0x3e8) [0186.771] Sleep (dwMilliseconds=0x3e8) [0186.773] Sleep (dwMilliseconds=0x3e8) [0186.775] Sleep (dwMilliseconds=0x3e8) [0186.776] Sleep (dwMilliseconds=0x3e8) [0186.778] Sleep (dwMilliseconds=0x3e8) [0186.779] Sleep (dwMilliseconds=0x3e8) [0186.781] Sleep (dwMilliseconds=0x3e8) [0186.783] Sleep (dwMilliseconds=0x3e8) [0186.784] Sleep (dwMilliseconds=0x3e8) [0186.786] Sleep (dwMilliseconds=0x3e8) [0186.787] Sleep (dwMilliseconds=0x3e8) [0186.789] Sleep (dwMilliseconds=0x3e8) [0186.790] Sleep (dwMilliseconds=0x3e8) [0186.792] Sleep (dwMilliseconds=0x3e8) [0186.794] Sleep (dwMilliseconds=0x3e8) [0186.795] Sleep (dwMilliseconds=0x3e8) [0186.797] Sleep (dwMilliseconds=0x3e8) [0186.799] Sleep (dwMilliseconds=0x3e8) [0186.800] Sleep (dwMilliseconds=0x3e8) [0186.802] Sleep (dwMilliseconds=0x3e8) [0186.803] Sleep (dwMilliseconds=0x3e8) [0186.805] Sleep (dwMilliseconds=0x3e8) [0186.806] Sleep (dwMilliseconds=0x3e8) [0186.808] Sleep (dwMilliseconds=0x3e8) [0186.811] Sleep (dwMilliseconds=0x3e8) [0186.814] Sleep (dwMilliseconds=0x3e8) [0186.817] Sleep (dwMilliseconds=0x3e8) [0186.820] Sleep (dwMilliseconds=0x3e8) [0186.824] Sleep (dwMilliseconds=0x3e8) [0186.827] Sleep (dwMilliseconds=0x3e8) [0186.828] Sleep (dwMilliseconds=0x3e8) [0186.830] Sleep (dwMilliseconds=0x3e8) [0186.831] Sleep (dwMilliseconds=0x3e8) [0186.835] Sleep (dwMilliseconds=0x3e8) [0186.836] Sleep (dwMilliseconds=0x3e8) [0186.838] Sleep (dwMilliseconds=0x3e8) [0186.839] Sleep (dwMilliseconds=0x3e8) [0186.842] Sleep (dwMilliseconds=0x3e8) [0186.843] Sleep (dwMilliseconds=0x3e8) [0186.845] Sleep (dwMilliseconds=0x3e8) [0186.847] Sleep (dwMilliseconds=0x3e8) [0186.848] Sleep (dwMilliseconds=0x3e8) [0186.850] Sleep (dwMilliseconds=0x3e8) [0186.853] Sleep (dwMilliseconds=0x3e8) [0186.856] Sleep (dwMilliseconds=0x3e8) [0186.857] Sleep (dwMilliseconds=0x3e8) [0186.859] Sleep (dwMilliseconds=0x3e8) [0186.860] Sleep (dwMilliseconds=0x3e8) [0186.862] Sleep (dwMilliseconds=0x3e8) [0186.863] Sleep (dwMilliseconds=0x3e8) [0186.865] Sleep (dwMilliseconds=0x3e8) [0186.866] Sleep (dwMilliseconds=0x3e8) [0186.868] Sleep (dwMilliseconds=0x3e8) [0186.870] Sleep (dwMilliseconds=0x3e8) [0186.871] Sleep (dwMilliseconds=0x3e8) [0186.873] Sleep (dwMilliseconds=0x3e8) [0186.875] Sleep (dwMilliseconds=0x3e8) [0186.877] Sleep (dwMilliseconds=0x3e8) [0186.878] Sleep (dwMilliseconds=0x3e8) [0186.880] Sleep (dwMilliseconds=0x3e8) [0186.881] Sleep (dwMilliseconds=0x3e8) [0186.883] Sleep (dwMilliseconds=0x3e8) [0186.886] Sleep (dwMilliseconds=0x3e8) [0186.888] Sleep (dwMilliseconds=0x3e8) [0186.889] Sleep (dwMilliseconds=0x3e8) [0186.891] Sleep (dwMilliseconds=0x3e8) [0186.892] Sleep (dwMilliseconds=0x3e8) [0186.894] Sleep (dwMilliseconds=0x3e8) [0186.895] Sleep (dwMilliseconds=0x3e8) [0186.897] Sleep (dwMilliseconds=0x3e8) [0186.898] Sleep (dwMilliseconds=0x3e8) [0186.900] Sleep (dwMilliseconds=0x3e8) [0186.901] Sleep (dwMilliseconds=0x3e8) [0186.903] Sleep (dwMilliseconds=0x3e8) [0186.904] Sleep (dwMilliseconds=0x3e8) [0186.906] Sleep (dwMilliseconds=0x3e8) [0186.907] Sleep (dwMilliseconds=0x3e8) [0186.909] Sleep (dwMilliseconds=0x3e8) [0186.910] Sleep (dwMilliseconds=0x3e8) [0186.911] Sleep (dwMilliseconds=0x3e8) [0186.913] Sleep (dwMilliseconds=0x3e8) [0186.914] Sleep (dwMilliseconds=0x3e8) [0186.917] Sleep (dwMilliseconds=0x3e8) [0186.918] Sleep (dwMilliseconds=0x3e8) [0186.920] Sleep (dwMilliseconds=0x3e8) [0186.921] Sleep (dwMilliseconds=0x3e8) [0186.923] Sleep (dwMilliseconds=0x3e8) [0186.924] Sleep (dwMilliseconds=0x3e8) [0186.926] Sleep (dwMilliseconds=0x3e8) [0186.927] Sleep (dwMilliseconds=0x3e8) [0186.929] Sleep (dwMilliseconds=0x3e8) [0186.930] Sleep (dwMilliseconds=0x3e8) [0186.932] Sleep (dwMilliseconds=0x3e8) [0186.933] Sleep (dwMilliseconds=0x3e8) [0186.935] Sleep (dwMilliseconds=0x3e8) [0186.936] Sleep (dwMilliseconds=0x3e8) [0186.938] Sleep (dwMilliseconds=0x3e8) [0186.939] Sleep (dwMilliseconds=0x3e8) [0186.941] Sleep (dwMilliseconds=0x3e8) [0186.942] Sleep (dwMilliseconds=0x3e8) [0186.944] Sleep (dwMilliseconds=0x3e8) [0186.945] Sleep (dwMilliseconds=0x3e8) [0186.949] Sleep (dwMilliseconds=0x3e8) [0186.950] Sleep (dwMilliseconds=0x3e8) [0186.952] Sleep (dwMilliseconds=0x3e8) [0186.953] Sleep (dwMilliseconds=0x3e8) [0186.955] Sleep (dwMilliseconds=0x3e8) [0186.956] Sleep (dwMilliseconds=0x3e8) [0186.958] Sleep (dwMilliseconds=0x3e8) [0186.959] Sleep (dwMilliseconds=0x3e8) [0186.961] Sleep (dwMilliseconds=0x3e8) [0186.962] Sleep (dwMilliseconds=0x3e8) [0186.964] Sleep (dwMilliseconds=0x3e8) [0186.965] Sleep (dwMilliseconds=0x3e8) [0186.967] Sleep (dwMilliseconds=0x3e8) [0186.968] Sleep (dwMilliseconds=0x3e8) [0186.977] Sleep (dwMilliseconds=0x3e8) [0186.978] Sleep (dwMilliseconds=0x3e8) [0186.980] Sleep (dwMilliseconds=0x3e8) [0186.982] Sleep (dwMilliseconds=0x3e8) [0186.984] Sleep (dwMilliseconds=0x3e8) [0186.985] Sleep (dwMilliseconds=0x3e8) [0186.987] Sleep (dwMilliseconds=0x3e8) [0186.990] Sleep (dwMilliseconds=0x3e8) [0186.991] Sleep (dwMilliseconds=0x3e8) [0186.994] Sleep (dwMilliseconds=0x3e8) [0186.998] Sleep (dwMilliseconds=0x3e8) [0187.001] Sleep (dwMilliseconds=0x3e8) [0187.009] Sleep (dwMilliseconds=0x3e8) [0187.010] Sleep (dwMilliseconds=0x3e8) [0187.012] Sleep (dwMilliseconds=0x3e8) [0187.013] Sleep (dwMilliseconds=0x3e8) [0187.016] Sleep (dwMilliseconds=0x3e8) [0187.018] Sleep (dwMilliseconds=0x3e8) [0187.021] Sleep (dwMilliseconds=0x3e8) [0187.024] Sleep (dwMilliseconds=0x3e8) [0187.027] Sleep (dwMilliseconds=0x3e8) [0187.031] Sleep (dwMilliseconds=0x3e8) [0187.034] Sleep (dwMilliseconds=0x3e8) [0187.035] Sleep (dwMilliseconds=0x3e8) [0187.037] Sleep (dwMilliseconds=0x3e8) [0187.038] Sleep (dwMilliseconds=0x3e8) [0187.040] Sleep (dwMilliseconds=0x3e8) [0187.041] Sleep (dwMilliseconds=0x3e8) [0187.043] Sleep (dwMilliseconds=0x3e8) [0187.044] Sleep (dwMilliseconds=0x3e8) [0187.046] Sleep (dwMilliseconds=0x3e8) [0187.048] Sleep (dwMilliseconds=0x3e8) [0187.051] Sleep (dwMilliseconds=0x3e8) [0187.053] Sleep (dwMilliseconds=0x3e8) [0187.056] Sleep (dwMilliseconds=0x3e8) [0187.057] Sleep (dwMilliseconds=0x3e8) [0187.059] Sleep (dwMilliseconds=0x3e8) [0187.060] Sleep (dwMilliseconds=0x3e8) [0187.062] Sleep (dwMilliseconds=0x3e8) [0187.063] Sleep (dwMilliseconds=0x3e8) [0187.065] Sleep (dwMilliseconds=0x3e8) [0187.066] Sleep (dwMilliseconds=0x3e8) [0187.068] Sleep (dwMilliseconds=0x3e8) [0187.069] Sleep (dwMilliseconds=0x3e8) [0187.071] Sleep (dwMilliseconds=0x3e8) [0187.077] Sleep (dwMilliseconds=0x3e8) [0187.078] Sleep (dwMilliseconds=0x3e8) [0187.080] Sleep (dwMilliseconds=0x3e8) [0187.081] Sleep (dwMilliseconds=0x3e8) [0187.083] Sleep (dwMilliseconds=0x3e8) [0187.084] Sleep (dwMilliseconds=0x3e8) [0187.088] Sleep (dwMilliseconds=0x3e8) [0187.089] Sleep (dwMilliseconds=0x3e8) [0187.091] Sleep (dwMilliseconds=0x3e8) [0187.092] Sleep (dwMilliseconds=0x3e8) [0187.094] Sleep (dwMilliseconds=0x3e8) [0187.095] Sleep (dwMilliseconds=0x3e8) [0187.097] Sleep (dwMilliseconds=0x3e8) [0187.098] Sleep (dwMilliseconds=0x3e8) [0187.100] Sleep (dwMilliseconds=0x3e8) [0187.101] Sleep (dwMilliseconds=0x3e8) [0187.103] Sleep (dwMilliseconds=0x3e8) [0187.121] Sleep (dwMilliseconds=0x3e8) [0187.125] Sleep (dwMilliseconds=0x3e8) [0187.127] Sleep (dwMilliseconds=0x3e8) [0187.128] Sleep (dwMilliseconds=0x3e8) [0187.130] Sleep (dwMilliseconds=0x3e8) [0187.131] Sleep (dwMilliseconds=0x3e8) [0187.133] Sleep (dwMilliseconds=0x3e8) [0187.134] Sleep (dwMilliseconds=0x3e8) [0187.137] Sleep (dwMilliseconds=0x3e8) [0187.139] Sleep (dwMilliseconds=0x3e8) [0187.141] Sleep (dwMilliseconds=0x3e8) [0187.142] Sleep (dwMilliseconds=0x3e8) [0187.145] Sleep (dwMilliseconds=0x3e8) [0187.150] Sleep (dwMilliseconds=0x3e8) [0187.151] Sleep (dwMilliseconds=0x3e8) [0187.153] Sleep (dwMilliseconds=0x3e8) [0187.155] Sleep (dwMilliseconds=0x3e8) [0187.157] Sleep (dwMilliseconds=0x3e8) [0187.158] Sleep (dwMilliseconds=0x3e8) [0187.159] Sleep (dwMilliseconds=0x3e8) [0187.161] Sleep (dwMilliseconds=0x3e8) [0187.163] Sleep (dwMilliseconds=0x3e8) [0187.165] Sleep (dwMilliseconds=0x3e8) [0187.166] Sleep (dwMilliseconds=0x3e8) [0187.168] Sleep (dwMilliseconds=0x3e8) [0187.170] Sleep (dwMilliseconds=0x3e8) [0187.171] Sleep (dwMilliseconds=0x3e8) [0187.172] Sleep (dwMilliseconds=0x3e8) [0187.174] Sleep (dwMilliseconds=0x3e8) [0187.177] Sleep (dwMilliseconds=0x3e8) [0187.179] Sleep (dwMilliseconds=0x3e8) [0187.180] Sleep (dwMilliseconds=0x3e8) [0187.182] Sleep (dwMilliseconds=0x3e8) [0187.184] Sleep (dwMilliseconds=0x3e8) [0187.185] Sleep (dwMilliseconds=0x3e8) [0187.187] Sleep (dwMilliseconds=0x3e8) [0187.188] Sleep (dwMilliseconds=0x3e8) [0187.190] Sleep (dwMilliseconds=0x3e8) [0187.192] Sleep (dwMilliseconds=0x3e8) [0187.193] Sleep (dwMilliseconds=0x3e8) [0187.195] Sleep (dwMilliseconds=0x3e8) [0187.213] Sleep (dwMilliseconds=0x3e8) [0187.214] Sleep (dwMilliseconds=0x3e8) [0187.216] Sleep (dwMilliseconds=0x3e8) [0187.218] Sleep (dwMilliseconds=0x3e8) [0187.219] Sleep (dwMilliseconds=0x3e8) [0187.221] Sleep (dwMilliseconds=0x3e8) [0187.222] Sleep (dwMilliseconds=0x3e8) [0187.224] Sleep (dwMilliseconds=0x3e8) [0187.225] Sleep (dwMilliseconds=0x3e8) [0187.227] Sleep (dwMilliseconds=0x3e8) [0187.228] Sleep (dwMilliseconds=0x3e8) [0187.230] Sleep (dwMilliseconds=0x3e8) [0187.231] Sleep (dwMilliseconds=0x3e8) [0187.233] Sleep (dwMilliseconds=0x3e8) [0187.234] Sleep (dwMilliseconds=0x3e8) [0187.236] Sleep (dwMilliseconds=0x3e8) [0187.238] Sleep (dwMilliseconds=0x3e8) [0187.239] Sleep (dwMilliseconds=0x3e8) [0187.246] Sleep (dwMilliseconds=0x3e8) [0187.247] Sleep (dwMilliseconds=0x3e8) [0187.249] Sleep (dwMilliseconds=0x3e8) [0187.250] Sleep (dwMilliseconds=0x3e8) [0187.252] Sleep (dwMilliseconds=0x3e8) [0187.253] Sleep (dwMilliseconds=0x3e8) [0187.255] Sleep (dwMilliseconds=0x3e8) [0187.256] Sleep (dwMilliseconds=0x3e8) [0187.258] Sleep (dwMilliseconds=0x3e8) [0187.259] Sleep (dwMilliseconds=0x3e8) [0187.261] Sleep (dwMilliseconds=0x3e8) [0187.263] Sleep (dwMilliseconds=0x3e8) [0187.265] Sleep (dwMilliseconds=0x3e8) [0187.266] Sleep (dwMilliseconds=0x3e8) [0187.268] Sleep (dwMilliseconds=0x3e8) [0187.270] Sleep (dwMilliseconds=0x3e8) [0187.271] Sleep (dwMilliseconds=0x3e8) [0187.273] Sleep (dwMilliseconds=0x3e8) [0187.274] Sleep (dwMilliseconds=0x3e8) [0187.277] Sleep (dwMilliseconds=0x3e8) [0187.278] Sleep (dwMilliseconds=0x3e8) [0187.280] Sleep (dwMilliseconds=0x3e8) [0187.282] Sleep (dwMilliseconds=0x3e8) [0187.300] Sleep (dwMilliseconds=0x3e8) [0187.302] Sleep (dwMilliseconds=0x3e8) [0187.304] Sleep (dwMilliseconds=0x3e8) [0187.305] Sleep (dwMilliseconds=0x3e8) [0187.307] Sleep (dwMilliseconds=0x3e8) [0187.308] Sleep (dwMilliseconds=0x3e8) [0187.310] Sleep (dwMilliseconds=0x3e8) [0187.311] Sleep (dwMilliseconds=0x3e8) [0187.313] Sleep (dwMilliseconds=0x3e8) [0187.314] Sleep (dwMilliseconds=0x3e8) [0187.316] Sleep (dwMilliseconds=0x3e8) [0187.317] Sleep (dwMilliseconds=0x3e8) [0187.319] Sleep (dwMilliseconds=0x3e8) [0187.320] Sleep (dwMilliseconds=0x3e8) [0187.322] Sleep (dwMilliseconds=0x3e8) [0187.324] Sleep (dwMilliseconds=0x3e8) [0187.325] Sleep (dwMilliseconds=0x3e8) [0187.328] Sleep (dwMilliseconds=0x3e8) [0187.332] Sleep (dwMilliseconds=0x3e8) [0187.333] Sleep (dwMilliseconds=0x3e8) [0187.334] Sleep (dwMilliseconds=0x3e8) [0187.337] Sleep (dwMilliseconds=0x3e8) [0187.339] Sleep (dwMilliseconds=0x3e8) [0187.340] Sleep (dwMilliseconds=0x3e8) [0187.342] Sleep (dwMilliseconds=0x3e8) [0187.344] Sleep (dwMilliseconds=0x3e8) [0187.346] Sleep (dwMilliseconds=0x3e8) [0187.361] Sleep (dwMilliseconds=0x3e8) [0187.362] Sleep (dwMilliseconds=0x3e8) [0187.364] Sleep (dwMilliseconds=0x3e8) [0187.365] Sleep (dwMilliseconds=0x3e8) [0187.367] Sleep (dwMilliseconds=0x3e8) [0187.368] Sleep (dwMilliseconds=0x3e8) [0187.370] Sleep (dwMilliseconds=0x3e8) [0187.372] Sleep (dwMilliseconds=0x3e8) [0187.375] Sleep (dwMilliseconds=0x3e8) [0187.379] Sleep (dwMilliseconds=0x3e8) [0187.380] Sleep (dwMilliseconds=0x3e8) [0187.382] Sleep (dwMilliseconds=0x3e8) [0187.383] Sleep (dwMilliseconds=0x3e8) [0187.385] Sleep (dwMilliseconds=0x3e8) [0187.386] Sleep (dwMilliseconds=0x3e8) [0187.388] Sleep (dwMilliseconds=0x3e8) [0187.389] Sleep (dwMilliseconds=0x3e8) [0187.391] Sleep (dwMilliseconds=0x3e8) [0187.393] Sleep (dwMilliseconds=0x3e8) [0187.394] Sleep (dwMilliseconds=0x3e8) [0187.395] Sleep (dwMilliseconds=0x3e8) [0187.397] Sleep (dwMilliseconds=0x3e8) [0187.398] Sleep (dwMilliseconds=0x3e8) [0187.400] Sleep (dwMilliseconds=0x3e8) [0187.401] Sleep (dwMilliseconds=0x3e8) [0187.403] Sleep (dwMilliseconds=0x3e8) [0187.404] Sleep (dwMilliseconds=0x3e8) [0187.406] Sleep (dwMilliseconds=0x3e8) [0187.407] Sleep (dwMilliseconds=0x3e8) [0187.409] Sleep (dwMilliseconds=0x3e8) [0187.410] Sleep (dwMilliseconds=0x3e8) [0187.412] Sleep (dwMilliseconds=0x3e8) [0187.413] Sleep (dwMilliseconds=0x3e8) [0187.416] Sleep (dwMilliseconds=0x3e8) [0187.417] Sleep (dwMilliseconds=0x3e8) [0187.419] Sleep (dwMilliseconds=0x3e8) [0187.420] Sleep (dwMilliseconds=0x3e8) [0187.422] Sleep (dwMilliseconds=0x3e8) [0187.423] Sleep (dwMilliseconds=0x3e8) [0187.425] Sleep (dwMilliseconds=0x3e8) [0187.426] Sleep (dwMilliseconds=0x3e8) [0187.428] Sleep (dwMilliseconds=0x3e8) [0187.429] Sleep (dwMilliseconds=0x3e8) [0187.431] Sleep (dwMilliseconds=0x3e8) [0187.432] Sleep (dwMilliseconds=0x3e8) [0187.434] Sleep (dwMilliseconds=0x3e8) [0187.436] Sleep (dwMilliseconds=0x3e8) [0187.437] Sleep (dwMilliseconds=0x3e8) [0187.438] Sleep (dwMilliseconds=0x3e8) [0187.440] Sleep (dwMilliseconds=0x3e8) [0187.441] Sleep (dwMilliseconds=0x3e8) [0187.443] Sleep (dwMilliseconds=0x3e8) [0187.445] Sleep (dwMilliseconds=0x3e8) [0187.447] Sleep (dwMilliseconds=0x3e8) [0187.448] Sleep (dwMilliseconds=0x3e8) [0187.450] Sleep (dwMilliseconds=0x3e8) [0187.452] Sleep (dwMilliseconds=0x3e8) [0187.454] Sleep (dwMilliseconds=0x3e8) [0187.456] Sleep (dwMilliseconds=0x3e8) [0187.458] Sleep (dwMilliseconds=0x3e8) [0187.459] Sleep (dwMilliseconds=0x3e8) [0187.461] Sleep (dwMilliseconds=0x3e8) [0187.462] Sleep (dwMilliseconds=0x3e8) [0187.464] Sleep (dwMilliseconds=0x3e8) [0187.465] Sleep (dwMilliseconds=0x3e8) [0187.467] Sleep (dwMilliseconds=0x3e8) [0187.469] Sleep (dwMilliseconds=0x3e8) [0187.470] Sleep (dwMilliseconds=0x3e8) [0187.472] Sleep (dwMilliseconds=0x3e8) [0187.474] Sleep (dwMilliseconds=0x3e8) [0187.475] Sleep (dwMilliseconds=0x3e8) [0187.478] Sleep (dwMilliseconds=0x3e8) [0187.480] Sleep (dwMilliseconds=0x3e8) [0187.482] Sleep (dwMilliseconds=0x3e8) [0187.483] Sleep (dwMilliseconds=0x3e8) [0187.485] Sleep (dwMilliseconds=0x3e8) [0187.486] Sleep (dwMilliseconds=0x3e8) [0187.488] Sleep (dwMilliseconds=0x3e8) [0187.489] Sleep (dwMilliseconds=0x3e8) [0187.491] Sleep (dwMilliseconds=0x3e8) [0187.492] Sleep (dwMilliseconds=0x3e8) [0187.494] Sleep (dwMilliseconds=0x3e8) [0187.496] Sleep (dwMilliseconds=0x3e8) [0187.497] Sleep (dwMilliseconds=0x3e8) [0187.498] Sleep (dwMilliseconds=0x3e8) [0187.500] Sleep (dwMilliseconds=0x3e8) [0187.501] Sleep (dwMilliseconds=0x3e8) [0187.503] Sleep (dwMilliseconds=0x3e8) [0187.505] Sleep (dwMilliseconds=0x3e8) [0187.507] Sleep (dwMilliseconds=0x3e8) [0187.508] Sleep (dwMilliseconds=0x3e8) [0187.509] Sleep (dwMilliseconds=0x3e8) [0187.511] Sleep (dwMilliseconds=0x3e8) [0187.512] Sleep (dwMilliseconds=0x3e8) [0187.514] Sleep (dwMilliseconds=0x3e8) [0187.515] Sleep (dwMilliseconds=0x3e8) [0187.517] Sleep (dwMilliseconds=0x3e8) [0187.518] Sleep (dwMilliseconds=0x3e8) [0187.520] Sleep (dwMilliseconds=0x3e8) [0187.521] Sleep (dwMilliseconds=0x3e8) [0187.523] Sleep (dwMilliseconds=0x3e8) [0187.524] Sleep (dwMilliseconds=0x3e8) [0187.526] Sleep (dwMilliseconds=0x3e8) [0187.528] Sleep (dwMilliseconds=0x3e8) [0187.530] Sleep (dwMilliseconds=0x3e8) [0187.531] Sleep (dwMilliseconds=0x3e8) [0187.533] Sleep (dwMilliseconds=0x3e8) [0187.534] Sleep (dwMilliseconds=0x3e8) [0187.536] Sleep (dwMilliseconds=0x3e8) [0187.537] Sleep (dwMilliseconds=0x3e8) [0187.539] Sleep (dwMilliseconds=0x3e8) [0187.540] Sleep (dwMilliseconds=0x3e8) [0187.542] Sleep (dwMilliseconds=0x3e8) [0187.544] Sleep (dwMilliseconds=0x3e8) [0187.546] Sleep (dwMilliseconds=0x3e8) [0187.547] Sleep (dwMilliseconds=0x3e8) [0187.548] Sleep (dwMilliseconds=0x3e8) [0187.550] Sleep (dwMilliseconds=0x3e8) [0187.551] Sleep (dwMilliseconds=0x3e8) [0187.553] Sleep (dwMilliseconds=0x3e8) [0187.555] Sleep (dwMilliseconds=0x3e8) [0187.556] Sleep (dwMilliseconds=0x3e8) [0187.558] Sleep (dwMilliseconds=0x3e8) [0187.560] Sleep (dwMilliseconds=0x3e8) [0187.561] Sleep (dwMilliseconds=0x3e8) [0187.563] Sleep (dwMilliseconds=0x3e8) [0187.564] Sleep (dwMilliseconds=0x3e8) [0187.566] Sleep (dwMilliseconds=0x3e8) [0187.567] Sleep (dwMilliseconds=0x3e8) [0187.569] Sleep (dwMilliseconds=0x3e8) [0187.571] Sleep (dwMilliseconds=0x3e8) [0187.572] Sleep (dwMilliseconds=0x3e8) [0187.575] Sleep (dwMilliseconds=0x3e8) [0187.576] Sleep (dwMilliseconds=0x3e8) [0187.579] Sleep (dwMilliseconds=0x3e8) [0187.580] Sleep (dwMilliseconds=0x3e8) [0187.582] Sleep (dwMilliseconds=0x3e8) [0187.584] Sleep (dwMilliseconds=0x3e8) [0187.585] Sleep (dwMilliseconds=0x3e8) [0187.587] Sleep (dwMilliseconds=0x3e8) [0187.590] Sleep (dwMilliseconds=0x3e8) [0187.592] Sleep (dwMilliseconds=0x3e8) [0187.593] Sleep (dwMilliseconds=0x3e8) [0187.595] Sleep (dwMilliseconds=0x3e8) [0187.597] Sleep (dwMilliseconds=0x3e8) [0187.602] Sleep (dwMilliseconds=0x3e8) [0187.603] Sleep (dwMilliseconds=0x3e8) [0187.606] Sleep (dwMilliseconds=0x3e8) [0187.608] Sleep (dwMilliseconds=0x3e8) [0187.610] Sleep (dwMilliseconds=0x3e8) [0187.611] Sleep (dwMilliseconds=0x3e8) [0187.613] Sleep (dwMilliseconds=0x3e8) [0187.614] Sleep (dwMilliseconds=0x3e8) [0187.636] Sleep (dwMilliseconds=0x3e8) [0187.653] Sleep (dwMilliseconds=0x3e8) [0187.656] Sleep (dwMilliseconds=0x3e8) [0187.657] Sleep (dwMilliseconds=0x3e8) [0187.659] Sleep (dwMilliseconds=0x3e8) [0187.660] Sleep (dwMilliseconds=0x3e8) [0187.662] Sleep (dwMilliseconds=0x3e8) [0187.667] Sleep (dwMilliseconds=0x3e8) [0187.670] Sleep (dwMilliseconds=0x3e8) [0187.672] Sleep (dwMilliseconds=0x3e8) [0187.674] Sleep (dwMilliseconds=0x3e8) [0187.675] Sleep (dwMilliseconds=0x3e8) [0187.678] Sleep (dwMilliseconds=0x3e8) [0187.680] Sleep (dwMilliseconds=0x3e8) [0187.681] Sleep (dwMilliseconds=0x3e8) [0187.684] Sleep (dwMilliseconds=0x3e8) [0187.687] Sleep (dwMilliseconds=0x3e8) [0187.688] Sleep (dwMilliseconds=0x3e8) [0187.690] Sleep (dwMilliseconds=0x3e8) [0187.692] Sleep (dwMilliseconds=0x3e8) [0187.693] Sleep (dwMilliseconds=0x3e8) [0187.695] Sleep (dwMilliseconds=0x3e8) [0187.696] Sleep (dwMilliseconds=0x3e8) [0187.698] Sleep (dwMilliseconds=0x3e8) [0187.699] Sleep (dwMilliseconds=0x3e8) [0187.701] Sleep (dwMilliseconds=0x3e8) [0187.702] Sleep (dwMilliseconds=0x3e8) [0187.704] Sleep (dwMilliseconds=0x3e8) [0187.705] Sleep (dwMilliseconds=0x3e8) [0187.707] Sleep (dwMilliseconds=0x3e8) [0187.708] Sleep (dwMilliseconds=0x3e8) [0187.710] Sleep (dwMilliseconds=0x3e8) [0187.711] Sleep (dwMilliseconds=0x3e8) [0187.713] Sleep (dwMilliseconds=0x3e8) [0187.715] Sleep (dwMilliseconds=0x3e8) [0187.717] Sleep (dwMilliseconds=0x3e8) [0187.718] Sleep (dwMilliseconds=0x3e8) [0187.720] Sleep (dwMilliseconds=0x3e8) [0187.731] Sleep (dwMilliseconds=0x3e8) [0187.733] Sleep (dwMilliseconds=0x3e8) [0187.734] Sleep (dwMilliseconds=0x3e8) [0187.736] Sleep (dwMilliseconds=0x3e8) [0187.737] Sleep (dwMilliseconds=0x3e8) [0187.739] Sleep (dwMilliseconds=0x3e8) [0187.740] Sleep (dwMilliseconds=0x3e8) [0187.742] Sleep (dwMilliseconds=0x3e8) [0187.743] Sleep (dwMilliseconds=0x3e8) [0187.745] Sleep (dwMilliseconds=0x3e8) [0187.746] Sleep (dwMilliseconds=0x3e8) [0187.748] Sleep (dwMilliseconds=0x3e8) [0187.749] Sleep (dwMilliseconds=0x3e8) [0187.751] Sleep (dwMilliseconds=0x3e8) [0187.752] Sleep (dwMilliseconds=0x3e8) [0187.754] Sleep (dwMilliseconds=0x3e8) [0187.755] Sleep (dwMilliseconds=0x3e8) [0187.757] Sleep (dwMilliseconds=0x3e8) [0187.758] Sleep (dwMilliseconds=0x3e8) [0187.760] Sleep (dwMilliseconds=0x3e8) [0187.761] Sleep (dwMilliseconds=0x3e8) [0187.764] Sleep (dwMilliseconds=0x3e8) [0187.765] Sleep (dwMilliseconds=0x3e8) [0187.767] Sleep (dwMilliseconds=0x3e8) [0187.768] Sleep (dwMilliseconds=0x3e8) [0187.770] Sleep (dwMilliseconds=0x3e8) [0187.771] Sleep (dwMilliseconds=0x3e8) [0187.772] Sleep (dwMilliseconds=0x3e8) [0187.774] Sleep (dwMilliseconds=0x3e8) [0187.775] Sleep (dwMilliseconds=0x3e8) [0187.782] Sleep (dwMilliseconds=0x3e8) [0187.784] Sleep (dwMilliseconds=0x3e8) [0187.785] Sleep (dwMilliseconds=0x3e8) [0187.787] Sleep (dwMilliseconds=0x3e8) [0187.788] Sleep (dwMilliseconds=0x3e8) [0187.790] Sleep (dwMilliseconds=0x3e8) [0187.791] Sleep (dwMilliseconds=0x3e8) [0187.793] Sleep (dwMilliseconds=0x3e8) [0187.794] Sleep (dwMilliseconds=0x3e8) [0187.796] Sleep (dwMilliseconds=0x3e8) [0187.797] Sleep (dwMilliseconds=0x3e8) [0187.799] Sleep (dwMilliseconds=0x3e8) [0187.800] Sleep (dwMilliseconds=0x3e8) [0187.802] Sleep (dwMilliseconds=0x3e8) [0187.803] Sleep (dwMilliseconds=0x3e8) [0187.805] Sleep (dwMilliseconds=0x3e8) [0187.806] Sleep (dwMilliseconds=0x3e8) [0187.810] Sleep (dwMilliseconds=0x3e8) [0187.812] Sleep (dwMilliseconds=0x3e8) [0187.813] Sleep (dwMilliseconds=0x3e8) [0187.815] Sleep (dwMilliseconds=0x3e8) [0187.817] Sleep (dwMilliseconds=0x3e8) [0187.819] Sleep (dwMilliseconds=0x3e8) [0187.820] Sleep (dwMilliseconds=0x3e8) [0187.822] Sleep (dwMilliseconds=0x3e8) [0187.823] Sleep (dwMilliseconds=0x3e8) [0187.825] Sleep (dwMilliseconds=0x3e8) [0187.826] Sleep (dwMilliseconds=0x3e8) [0187.828] Sleep (dwMilliseconds=0x3e8) [0187.829] Sleep (dwMilliseconds=0x3e8) [0187.831] Sleep (dwMilliseconds=0x3e8) [0187.832] Sleep (dwMilliseconds=0x3e8) [0187.834] Sleep (dwMilliseconds=0x3e8) [0187.835] Sleep (dwMilliseconds=0x3e8) [0187.837] Sleep (dwMilliseconds=0x3e8) [0187.838] Sleep (dwMilliseconds=0x3e8) [0187.840] Sleep (dwMilliseconds=0x3e8) [0187.846] Sleep (dwMilliseconds=0x3e8) [0187.850] Sleep (dwMilliseconds=0x3e8) [0187.852] Sleep (dwMilliseconds=0x3e8) [0187.853] Sleep (dwMilliseconds=0x3e8) [0187.855] Sleep (dwMilliseconds=0x3e8) [0187.856] Sleep (dwMilliseconds=0x3e8) [0188.046] Sleep (dwMilliseconds=0x3e8) [0188.047] Sleep (dwMilliseconds=0x3e8) [0188.048] Sleep (dwMilliseconds=0x3e8) [0188.051] Sleep (dwMilliseconds=0x3e8) [0188.052] Sleep (dwMilliseconds=0x3e8) [0188.054] Sleep (dwMilliseconds=0x3e8) [0188.055] Sleep (dwMilliseconds=0x3e8) [0188.056] Sleep (dwMilliseconds=0x3e8) [0188.058] Sleep (dwMilliseconds=0x3e8) [0188.060] Sleep (dwMilliseconds=0x3e8) [0188.061] Sleep (dwMilliseconds=0x3e8) [0188.063] Sleep (dwMilliseconds=0x3e8) [0188.064] Sleep (dwMilliseconds=0x3e8) [0188.066] Sleep (dwMilliseconds=0x3e8) [0188.067] Sleep (dwMilliseconds=0x3e8) [0188.071] Sleep (dwMilliseconds=0x3e8) [0188.072] Sleep (dwMilliseconds=0x3e8) [0188.074] Sleep (dwMilliseconds=0x3e8) [0188.075] Sleep (dwMilliseconds=0x3e8) [0188.077] Sleep (dwMilliseconds=0x3e8) [0188.080] Sleep (dwMilliseconds=0x3e8) [0188.081] Sleep (dwMilliseconds=0x3e8) [0188.084] Sleep (dwMilliseconds=0x3e8) [0188.086] Sleep (dwMilliseconds=0x3e8) [0188.087] Sleep (dwMilliseconds=0x3e8) [0188.089] Sleep (dwMilliseconds=0x3e8) [0188.091] Sleep (dwMilliseconds=0x3e8) [0188.092] Sleep (dwMilliseconds=0x3e8) [0188.094] Sleep (dwMilliseconds=0x3e8) [0188.096] Sleep (dwMilliseconds=0x3e8) [0188.097] Sleep (dwMilliseconds=0x3e8) [0188.100] Sleep (dwMilliseconds=0x3e8) [0188.179] Sleep (dwMilliseconds=0x3e8) [0188.182] Sleep (dwMilliseconds=0x3e8) [0188.184] Sleep (dwMilliseconds=0x3e8) [0188.186] Sleep (dwMilliseconds=0x3e8) [0188.187] Sleep (dwMilliseconds=0x3e8) [0188.189] Sleep (dwMilliseconds=0x3e8) [0188.190] Sleep (dwMilliseconds=0x3e8) [0188.192] Sleep (dwMilliseconds=0x3e8) [0188.195] Sleep (dwMilliseconds=0x3e8) [0188.197] Sleep (dwMilliseconds=0x3e8) [0188.200] Sleep (dwMilliseconds=0x3e8) [0188.201] Sleep (dwMilliseconds=0x3e8) [0188.203] Sleep (dwMilliseconds=0x3e8) [0188.204] Sleep (dwMilliseconds=0x3e8) [0188.206] Sleep (dwMilliseconds=0x3e8) [0188.207] Sleep (dwMilliseconds=0x3e8) [0188.209] Sleep (dwMilliseconds=0x3e8) [0188.211] Sleep (dwMilliseconds=0x3e8) [0188.212] Sleep (dwMilliseconds=0x3e8) [0188.214] Sleep (dwMilliseconds=0x3e8) [0188.215] Sleep (dwMilliseconds=0x3e8) [0188.217] Sleep (dwMilliseconds=0x3e8) [0188.218] Sleep (dwMilliseconds=0x3e8) [0188.220] Sleep (dwMilliseconds=0x3e8) [0188.222] Sleep (dwMilliseconds=0x3e8) [0188.223] Sleep (dwMilliseconds=0x3e8) [0188.225] Sleep (dwMilliseconds=0x3e8) [0188.226] Sleep (dwMilliseconds=0x3e8) [0188.228] Sleep (dwMilliseconds=0x3e8) [0188.229] Sleep (dwMilliseconds=0x3e8) [0188.231] Sleep (dwMilliseconds=0x3e8) [0188.232] Sleep (dwMilliseconds=0x3e8) [0188.250] Sleep (dwMilliseconds=0x3e8) [0188.251] Sleep (dwMilliseconds=0x3e8) [0188.902] Sleep (dwMilliseconds=0x3e8) [0188.903] Sleep (dwMilliseconds=0x3e8) [0188.905] Sleep (dwMilliseconds=0x3e8) [0188.906] Sleep (dwMilliseconds=0x3e8) [0188.908] Sleep (dwMilliseconds=0x3e8) [0188.909] Sleep (dwMilliseconds=0x3e8) [0188.911] Sleep (dwMilliseconds=0x3e8) [0188.915] Sleep (dwMilliseconds=0x3e8) [0188.917] Sleep (dwMilliseconds=0x3e8) [0188.918] Sleep (dwMilliseconds=0x3e8) [0188.920] Sleep (dwMilliseconds=0x3e8) [0190.011] Sleep (dwMilliseconds=0x3e8) [0190.013] Sleep (dwMilliseconds=0x3e8) [0190.015] Sleep (dwMilliseconds=0x3e8) [0190.017] Sleep (dwMilliseconds=0x3e8) [0190.018] Sleep (dwMilliseconds=0x3e8) [0190.020] Sleep (dwMilliseconds=0x3e8) [0190.034] Sleep (dwMilliseconds=0x3e8) [0190.072] Sleep (dwMilliseconds=0x3e8) [0190.074] Sleep (dwMilliseconds=0x3e8) [0190.075] Sleep (dwMilliseconds=0x3e8) [0190.077] Sleep (dwMilliseconds=0x3e8) [0190.078] Sleep (dwMilliseconds=0x3e8) [0190.079] Sleep (dwMilliseconds=0x3e8) [0190.098] Sleep (dwMilliseconds=0x3e8) [0190.100] Sleep (dwMilliseconds=0x3e8) [0190.101] Sleep (dwMilliseconds=0x3e8) [0190.102] Sleep (dwMilliseconds=0x3e8) [0190.104] Sleep (dwMilliseconds=0x3e8) [0190.105] Sleep (dwMilliseconds=0x3e8) [0190.107] Sleep (dwMilliseconds=0x3e8) [0190.108] Sleep (dwMilliseconds=0x3e8) [0190.109] Sleep (dwMilliseconds=0x3e8) [0190.112] Sleep (dwMilliseconds=0x3e8) [0190.113] Sleep (dwMilliseconds=0x3e8) [0190.114] Sleep (dwMilliseconds=0x3e8) [0190.116] Sleep (dwMilliseconds=0x3e8) [0190.117] Sleep (dwMilliseconds=0x3e8) [0190.118] Sleep (dwMilliseconds=0x3e8) [0190.120] Sleep (dwMilliseconds=0x3e8) [0190.122] Sleep (dwMilliseconds=0x3e8) [0190.123] Sleep (dwMilliseconds=0x3e8) [0190.124] Sleep (dwMilliseconds=0x3e8) [0190.126] Sleep (dwMilliseconds=0x3e8) [0190.128] Sleep (dwMilliseconds=0x3e8) [0190.129] Sleep (dwMilliseconds=0x3e8) [0190.396] Sleep (dwMilliseconds=0x3e8) [0190.398] Sleep (dwMilliseconds=0x3e8) [0190.399] Sleep (dwMilliseconds=0x3e8) [0190.401] Sleep (dwMilliseconds=0x3e8) [0190.402] Sleep (dwMilliseconds=0x3e8) [0190.404] Sleep (dwMilliseconds=0x3e8) [0190.405] Sleep (dwMilliseconds=0x3e8) [0190.407] Sleep (dwMilliseconds=0x3e8) [0190.408] Sleep (dwMilliseconds=0x3e8) [0190.410] Sleep (dwMilliseconds=0x3e8) [0190.411] Sleep (dwMilliseconds=0x3e8) [0190.413] Sleep (dwMilliseconds=0x3e8) [0190.416] Sleep (dwMilliseconds=0x3e8) [0190.418] Sleep (dwMilliseconds=0x3e8) [0190.420] Sleep (dwMilliseconds=0x3e8) [0190.421] Sleep (dwMilliseconds=0x3e8) [0190.422] Sleep (dwMilliseconds=0x3e8) [0190.424] Sleep (dwMilliseconds=0x3e8) [0190.425] Sleep (dwMilliseconds=0x3e8) [0190.427] Sleep (dwMilliseconds=0x3e8) [0190.428] Sleep (dwMilliseconds=0x3e8) [0190.430] Sleep (dwMilliseconds=0x3e8) [0190.431] Sleep (dwMilliseconds=0x3e8) [0190.433] Sleep (dwMilliseconds=0x3e8) [0191.300] Sleep (dwMilliseconds=0x3e8) [0191.301] Sleep (dwMilliseconds=0x3e8) [0191.306] Sleep (dwMilliseconds=0x3e8) [0191.310] Sleep (dwMilliseconds=0x3e8) [0191.336] Sleep (dwMilliseconds=0x3e8) [0191.337] Sleep (dwMilliseconds=0x3e8) [0191.339] Sleep (dwMilliseconds=0x3e8) [0191.340] Sleep (dwMilliseconds=0x3e8) [0191.341] Sleep (dwMilliseconds=0x3e8) [0191.343] Sleep (dwMilliseconds=0x3e8) [0191.344] Sleep (dwMilliseconds=0x3e8) [0191.346] Sleep (dwMilliseconds=0x3e8) [0191.347] Sleep (dwMilliseconds=0x3e8) [0191.349] Sleep (dwMilliseconds=0x3e8) [0191.351] Sleep (dwMilliseconds=0x3e8) [0191.364] Sleep (dwMilliseconds=0x3e8) [0191.379] Sleep (dwMilliseconds=0x3e8) [0191.381] Sleep (dwMilliseconds=0x3e8) [0191.382] Sleep (dwMilliseconds=0x3e8) [0191.384] Sleep (dwMilliseconds=0x3e8) [0191.385] Sleep (dwMilliseconds=0x3e8) [0191.386] Sleep (dwMilliseconds=0x3e8) [0191.388] Sleep (dwMilliseconds=0x3e8) [0191.390] Sleep (dwMilliseconds=0x3e8) [0191.391] Sleep (dwMilliseconds=0x3e8) [0191.393] Sleep (dwMilliseconds=0x3e8) [0191.395] Sleep (dwMilliseconds=0x3e8) [0191.396] Sleep (dwMilliseconds=0x3e8) [0191.399] Sleep (dwMilliseconds=0x3e8) [0191.401] Sleep (dwMilliseconds=0x3e8) [0191.402] Sleep (dwMilliseconds=0x3e8) [0191.404] Sleep (dwMilliseconds=0x3e8) [0191.405] Sleep (dwMilliseconds=0x3e8) [0191.406] Sleep (dwMilliseconds=0x3e8) [0191.408] Sleep (dwMilliseconds=0x3e8) [0191.409] Sleep (dwMilliseconds=0x3e8) [0191.412] Sleep (dwMilliseconds=0x3e8) [0191.414] Sleep (dwMilliseconds=0x3e8) [0191.416] Sleep (dwMilliseconds=0x3e8) [0191.417] Sleep (dwMilliseconds=0x3e8) [0191.419] Sleep (dwMilliseconds=0x3e8) [0191.421] Sleep (dwMilliseconds=0x3e8) [0191.422] Sleep (dwMilliseconds=0x3e8) [0191.423] Sleep (dwMilliseconds=0x3e8) [0191.425] Sleep (dwMilliseconds=0x3e8) [0191.427] Sleep (dwMilliseconds=0x3e8) [0191.429] Sleep (dwMilliseconds=0x3e8) [0191.430] Sleep (dwMilliseconds=0x3e8) [0191.443] Sleep (dwMilliseconds=0x3e8) [0191.445] Sleep (dwMilliseconds=0x3e8) [0191.446] Sleep (dwMilliseconds=0x3e8) [0191.448] Sleep (dwMilliseconds=0x3e8) [0191.449] Sleep (dwMilliseconds=0x3e8) [0191.454] Sleep (dwMilliseconds=0x3e8) [0191.460] Sleep (dwMilliseconds=0x3e8) [0191.464] Sleep (dwMilliseconds=0x3e8) [0191.474] Sleep (dwMilliseconds=0x3e8) [0191.475] Sleep (dwMilliseconds=0x3e8) [0191.477] Sleep (dwMilliseconds=0x3e8) [0191.478] Sleep (dwMilliseconds=0x3e8) [0191.481] Sleep (dwMilliseconds=0x3e8) [0191.487] Sleep (dwMilliseconds=0x3e8) [0191.490] Sleep (dwMilliseconds=0x3e8) [0191.492] Sleep (dwMilliseconds=0x3e8) [0191.498] Sleep (dwMilliseconds=0x3e8) [0191.501] Sleep (dwMilliseconds=0x3e8) [0191.503] Sleep (dwMilliseconds=0x3e8) [0191.506] Sleep (dwMilliseconds=0x3e8) [0191.508] Sleep (dwMilliseconds=0x3e8) [0191.509] Sleep (dwMilliseconds=0x3e8) [0191.514] Sleep (dwMilliseconds=0x3e8) [0191.517] Sleep (dwMilliseconds=0x3e8) [0191.519] Sleep (dwMilliseconds=0x3e8) [0191.521] Sleep (dwMilliseconds=0x3e8) [0191.523] Sleep (dwMilliseconds=0x3e8) [0191.524] Sleep (dwMilliseconds=0x3e8) [0191.526] Sleep (dwMilliseconds=0x3e8) [0191.527] Sleep (dwMilliseconds=0x3e8) [0191.530] Sleep (dwMilliseconds=0x3e8) [0191.531] Sleep (dwMilliseconds=0x3e8) [0191.533] Sleep (dwMilliseconds=0x3e8) [0191.535] Sleep (dwMilliseconds=0x3e8) [0191.538] Sleep (dwMilliseconds=0x3e8) [0191.541] Sleep (dwMilliseconds=0x3e8) [0191.544] Sleep (dwMilliseconds=0x3e8) [0191.545] Sleep (dwMilliseconds=0x3e8) [0191.547] Sleep (dwMilliseconds=0x3e8) [0191.551] Sleep (dwMilliseconds=0x3e8) [0191.554] Sleep (dwMilliseconds=0x3e8) [0191.557] Sleep (dwMilliseconds=0x3e8) [0191.558] Sleep (dwMilliseconds=0x3e8) [0191.560] Sleep (dwMilliseconds=0x3e8) [0191.561] Sleep (dwMilliseconds=0x3e8) [0191.563] Sleep (dwMilliseconds=0x3e8) [0191.564] Sleep (dwMilliseconds=0x3e8) [0191.567] Sleep (dwMilliseconds=0x3e8) [0191.572] Sleep (dwMilliseconds=0x3e8) [0191.575] Sleep (dwMilliseconds=0x3e8) [0191.576] Sleep (dwMilliseconds=0x3e8) [0191.578] Sleep (dwMilliseconds=0x3e8) [0191.580] Sleep (dwMilliseconds=0x3e8) [0191.585] Sleep (dwMilliseconds=0x3e8) [0191.587] Sleep (dwMilliseconds=0x3e8) [0191.591] Sleep (dwMilliseconds=0x3e8) [0191.594] Sleep (dwMilliseconds=0x3e8) [0191.595] Sleep (dwMilliseconds=0x3e8) [0191.597] Sleep (dwMilliseconds=0x3e8) [0191.600] Sleep (dwMilliseconds=0x3e8) [0191.603] Sleep (dwMilliseconds=0x3e8) [0191.606] Sleep (dwMilliseconds=0x3e8) [0191.608] Sleep (dwMilliseconds=0x3e8) [0191.609] Sleep (dwMilliseconds=0x3e8) [0191.611] Sleep (dwMilliseconds=0x3e8) [0191.612] Sleep (dwMilliseconds=0x3e8) [0191.614] Sleep (dwMilliseconds=0x3e8) [0191.615] Sleep (dwMilliseconds=0x3e8) [0191.617] Sleep (dwMilliseconds=0x3e8) [0191.618] Sleep (dwMilliseconds=0x3e8) [0191.620] Sleep (dwMilliseconds=0x3e8) [0191.621] Sleep (dwMilliseconds=0x3e8) [0191.623] Sleep (dwMilliseconds=0x3e8) [0191.624] Sleep (dwMilliseconds=0x3e8) [0191.626] Sleep (dwMilliseconds=0x3e8) [0191.640] Sleep (dwMilliseconds=0x3e8) [0191.642] Sleep (dwMilliseconds=0x3e8) [0191.643] Sleep (dwMilliseconds=0x3e8) [0191.645] Sleep (dwMilliseconds=0x3e8) [0191.646] Sleep (dwMilliseconds=0x3e8) [0191.661] Sleep (dwMilliseconds=0x3e8) [0191.664] Sleep (dwMilliseconds=0x3e8) [0191.667] Sleep (dwMilliseconds=0x3e8) [0191.669] Sleep (dwMilliseconds=0x3e8) [0191.671] Sleep (dwMilliseconds=0x3e8) [0191.672] Sleep (dwMilliseconds=0x3e8) [0191.675] Sleep (dwMilliseconds=0x3e8) [0191.680] Sleep (dwMilliseconds=0x3e8) [0191.682] Sleep (dwMilliseconds=0x3e8) [0191.688] Sleep (dwMilliseconds=0x3e8) [0191.689] Sleep (dwMilliseconds=0x3e8) [0191.690] Sleep (dwMilliseconds=0x3e8) [0191.692] Sleep (dwMilliseconds=0x3e8) [0191.693] Sleep (dwMilliseconds=0x3e8) [0191.701] Sleep (dwMilliseconds=0x3e8) [0191.705] Sleep (dwMilliseconds=0x3e8) [0191.710] Sleep (dwMilliseconds=0x3e8) [0191.713] Sleep (dwMilliseconds=0x3e8) [0191.714] Sleep (dwMilliseconds=0x3e8) [0191.730] Sleep (dwMilliseconds=0x3e8) [0191.732] Sleep (dwMilliseconds=0x3e8) [0191.733] Sleep (dwMilliseconds=0x3e8) [0191.735] Sleep (dwMilliseconds=0x3e8) [0191.738] Sleep (dwMilliseconds=0x3e8) [0191.740] Sleep (dwMilliseconds=0x3e8) [0191.742] Sleep (dwMilliseconds=0x3e8) [0191.750] Sleep (dwMilliseconds=0x3e8) [0191.754] Sleep (dwMilliseconds=0x3e8) [0191.755] Sleep (dwMilliseconds=0x3e8) [0191.756] Sleep (dwMilliseconds=0x3e8) [0191.758] Sleep (dwMilliseconds=0x3e8) [0191.759] Sleep (dwMilliseconds=0x3e8) [0191.761] Sleep (dwMilliseconds=0x3e8) [0191.767] Sleep (dwMilliseconds=0x3e8) [0191.769] Sleep (dwMilliseconds=0x3e8) [0191.770] Sleep (dwMilliseconds=0x3e8) [0191.772] Sleep (dwMilliseconds=0x3e8) [0191.773] Sleep (dwMilliseconds=0x3e8) [0191.775] Sleep (dwMilliseconds=0x3e8) [0191.776] Sleep (dwMilliseconds=0x3e8) [0191.778] Sleep (dwMilliseconds=0x3e8) [0191.779] Sleep (dwMilliseconds=0x3e8) [0191.781] Sleep (dwMilliseconds=0x3e8) [0191.782] Sleep (dwMilliseconds=0x3e8) [0191.784] Sleep (dwMilliseconds=0x3e8) [0191.788] Sleep (dwMilliseconds=0x3e8) [0191.790] Sleep (dwMilliseconds=0x3e8) [0191.802] Sleep (dwMilliseconds=0x3e8) [0191.804] Sleep (dwMilliseconds=0x3e8) [0191.805] Sleep (dwMilliseconds=0x3e8) [0191.807] Sleep (dwMilliseconds=0x3e8) [0191.808] Sleep (dwMilliseconds=0x3e8) [0191.811] Sleep (dwMilliseconds=0x3e8) [0191.813] Sleep (dwMilliseconds=0x3e8) [0191.816] Sleep (dwMilliseconds=0x3e8) [0191.830] Sleep (dwMilliseconds=0x3e8) [0191.832] Sleep (dwMilliseconds=0x3e8) [0191.835] Sleep (dwMilliseconds=0x3e8) [0191.837] Sleep (dwMilliseconds=0x3e8) [0191.840] Sleep (dwMilliseconds=0x3e8) [0191.842] Sleep (dwMilliseconds=0x3e8) [0191.843] Sleep (dwMilliseconds=0x3e8) [0191.844] Sleep (dwMilliseconds=0x3e8) [0191.846] Sleep (dwMilliseconds=0x3e8) [0191.847] Sleep (dwMilliseconds=0x3e8) [0191.849] Sleep (dwMilliseconds=0x3e8) [0191.850] Sleep (dwMilliseconds=0x3e8) [0191.852] Sleep (dwMilliseconds=0x3e8) [0191.853] Sleep (dwMilliseconds=0x3e8) [0191.855] Sleep (dwMilliseconds=0x3e8) [0191.870] Sleep (dwMilliseconds=0x3e8) [0191.871] Sleep (dwMilliseconds=0x3e8) [0191.873] Sleep (dwMilliseconds=0x3e8) [0191.874] Sleep (dwMilliseconds=0x3e8) [0191.876] Sleep (dwMilliseconds=0x3e8) [0191.877] Sleep (dwMilliseconds=0x3e8) [0191.879] Sleep (dwMilliseconds=0x3e8) [0191.880] Sleep (dwMilliseconds=0x3e8) [0191.882] Sleep (dwMilliseconds=0x3e8) [0191.883] Sleep (dwMilliseconds=0x3e8) [0191.885] Sleep (dwMilliseconds=0x3e8) [0191.886] Sleep (dwMilliseconds=0x3e8) [0191.888] Sleep (dwMilliseconds=0x3e8) [0191.890] Sleep (dwMilliseconds=0x3e8) [0191.891] Sleep (dwMilliseconds=0x3e8) [0191.893] Sleep (dwMilliseconds=0x3e8) [0191.894] Sleep (dwMilliseconds=0x3e8) [0191.896] Sleep (dwMilliseconds=0x3e8) [0191.897] Sleep (dwMilliseconds=0x3e8) [0191.899] Sleep (dwMilliseconds=0x3e8) [0191.902] Sleep (dwMilliseconds=0x3e8) [0191.903] Sleep (dwMilliseconds=0x3e8) [0191.905] Sleep (dwMilliseconds=0x3e8) [0191.906] Sleep (dwMilliseconds=0x3e8) [0191.909] Sleep (dwMilliseconds=0x3e8) [0191.910] Sleep (dwMilliseconds=0x3e8) [0191.914] Sleep (dwMilliseconds=0x3e8) [0191.917] Sleep (dwMilliseconds=0x3e8) [0191.919] Sleep (dwMilliseconds=0x3e8) [0191.923] Sleep (dwMilliseconds=0x3e8) [0191.926] Sleep (dwMilliseconds=0x3e8) [0191.929] Sleep (dwMilliseconds=0x3e8) [0191.932] Sleep (dwMilliseconds=0x3e8) [0191.934] Sleep (dwMilliseconds=0x3e8) [0191.935] Sleep (dwMilliseconds=0x3e8) [0191.940] Sleep (dwMilliseconds=0x3e8) [0191.941] Sleep (dwMilliseconds=0x3e8) [0191.943] Sleep (dwMilliseconds=0x3e8) [0191.944] Sleep (dwMilliseconds=0x3e8) [0191.946] Sleep (dwMilliseconds=0x3e8) [0191.949] Sleep (dwMilliseconds=0x3e8) [0191.950] Sleep (dwMilliseconds=0x3e8) [0191.952] Sleep (dwMilliseconds=0x3e8) [0191.954] Sleep (dwMilliseconds=0x3e8) [0191.957] Sleep (dwMilliseconds=0x3e8) [0191.958] Sleep (dwMilliseconds=0x3e8) [0191.960] Sleep (dwMilliseconds=0x3e8) [0191.961] Sleep (dwMilliseconds=0x3e8) [0191.963] Sleep (dwMilliseconds=0x3e8) [0191.964] Sleep (dwMilliseconds=0x3e8) [0191.969] Sleep (dwMilliseconds=0x3e8) [0191.971] Sleep (dwMilliseconds=0x3e8) [0191.994] Sleep (dwMilliseconds=0x3e8) [0191.995] Sleep (dwMilliseconds=0x3e8) [0191.996] Sleep (dwMilliseconds=0x3e8) [0191.998] Sleep (dwMilliseconds=0x3e8) [0192.001] Sleep (dwMilliseconds=0x3e8) [0192.003] Sleep (dwMilliseconds=0x3e8) [0192.005] Sleep (dwMilliseconds=0x3e8) [0192.006] Sleep (dwMilliseconds=0x3e8) [0192.008] Sleep (dwMilliseconds=0x3e8) [0192.009] Sleep (dwMilliseconds=0x3e8) [0192.010] Sleep (dwMilliseconds=0x3e8) [0192.012] Sleep (dwMilliseconds=0x3e8) [0192.015] Sleep (dwMilliseconds=0x3e8) [0192.016] Sleep (dwMilliseconds=0x3e8) [0192.017] Sleep (dwMilliseconds=0x3e8) [0192.020] Sleep (dwMilliseconds=0x3e8) [0192.021] Sleep (dwMilliseconds=0x3e8) [0192.024] Sleep (dwMilliseconds=0x3e8) [0192.025] Sleep (dwMilliseconds=0x3e8) [0192.028] Sleep (dwMilliseconds=0x3e8) [0192.029] Sleep (dwMilliseconds=0x3e8) [0192.030] Sleep (dwMilliseconds=0x3e8) [0192.033] Sleep (dwMilliseconds=0x3e8) [0192.034] Sleep (dwMilliseconds=0x3e8) [0192.035] Sleep (dwMilliseconds=0x3e8) [0192.038] Sleep (dwMilliseconds=0x3e8) [0192.040] Sleep (dwMilliseconds=0x3e8) [0192.044] Sleep (dwMilliseconds=0x3e8) [0192.045] Sleep (dwMilliseconds=0x3e8) [0192.047] Sleep (dwMilliseconds=0x3e8) [0192.048] Sleep (dwMilliseconds=0x3e8) [0192.050] Sleep (dwMilliseconds=0x3e8) [0192.051] Sleep (dwMilliseconds=0x3e8) [0192.053] Sleep (dwMilliseconds=0x3e8) [0192.055] Sleep (dwMilliseconds=0x3e8) [0192.058] Sleep (dwMilliseconds=0x3e8) [0192.059] Sleep (dwMilliseconds=0x3e8) [0192.060] Sleep (dwMilliseconds=0x3e8) [0192.064] Sleep (dwMilliseconds=0x3e8) [0192.068] Sleep (dwMilliseconds=0x3e8) [0192.071] Sleep (dwMilliseconds=0x3e8) [0192.073] Sleep (dwMilliseconds=0x3e8) [0192.074] Sleep (dwMilliseconds=0x3e8) [0192.076] Sleep (dwMilliseconds=0x3e8) [0192.077] Sleep (dwMilliseconds=0x3e8) [0192.079] Sleep (dwMilliseconds=0x3e8) [0192.080] Sleep (dwMilliseconds=0x3e8) [0192.082] Sleep (dwMilliseconds=0x3e8) [0192.084] Sleep (dwMilliseconds=0x3e8) [0192.085] Sleep (dwMilliseconds=0x3e8) [0192.087] Sleep (dwMilliseconds=0x3e8) [0192.088] Sleep (dwMilliseconds=0x3e8) [0192.090] Sleep (dwMilliseconds=0x3e8) [0192.091] Sleep (dwMilliseconds=0x3e8) [0192.093] Sleep (dwMilliseconds=0x3e8) [0192.110] Sleep (dwMilliseconds=0x3e8) [0192.112] Sleep (dwMilliseconds=0x3e8) [0192.113] Sleep (dwMilliseconds=0x3e8) [0192.115] Sleep (dwMilliseconds=0x3e8) [0192.116] Sleep (dwMilliseconds=0x3e8) [0192.117] Sleep (dwMilliseconds=0x3e8) [0192.119] Sleep (dwMilliseconds=0x3e8) [0192.120] Sleep (dwMilliseconds=0x3e8) [0192.122] Sleep (dwMilliseconds=0x3e8) [0192.123] Sleep (dwMilliseconds=0x3e8) [0192.125] Sleep (dwMilliseconds=0x3e8) [0192.126] Sleep (dwMilliseconds=0x3e8) [0192.128] Sleep (dwMilliseconds=0x3e8) [0192.130] Sleep (dwMilliseconds=0x3e8) [0192.131] Sleep (dwMilliseconds=0x3e8) [0192.133] Sleep (dwMilliseconds=0x3e8) [0192.135] Sleep (dwMilliseconds=0x3e8) [0192.137] Sleep (dwMilliseconds=0x3e8) [0192.140] Sleep (dwMilliseconds=0x3e8) [0192.142] Sleep (dwMilliseconds=0x3e8) [0192.146] Sleep (dwMilliseconds=0x3e8) [0192.148] Sleep (dwMilliseconds=0x3e8) [0192.151] Sleep (dwMilliseconds=0x3e8) [0192.152] Sleep (dwMilliseconds=0x3e8) [0192.157] Sleep (dwMilliseconds=0x3e8) [0192.159] Sleep (dwMilliseconds=0x3e8) [0192.173] Sleep (dwMilliseconds=0x3e8) [0192.199] Sleep (dwMilliseconds=0x3e8) [0192.200] Sleep (dwMilliseconds=0x3e8) [0192.202] Sleep (dwMilliseconds=0x3e8) [0192.203] Sleep (dwMilliseconds=0x3e8) [0192.205] Sleep (dwMilliseconds=0x3e8) [0192.206] Sleep (dwMilliseconds=0x3e8) [0192.209] Sleep (dwMilliseconds=0x3e8) [0192.215] Sleep (dwMilliseconds=0x3e8) [0192.216] Sleep (dwMilliseconds=0x3e8) [0192.218] Sleep (dwMilliseconds=0x3e8) [0192.227] Sleep (dwMilliseconds=0x3e8) [0192.237] Sleep (dwMilliseconds=0x3e8) [0192.239] Sleep (dwMilliseconds=0x3e8) [0192.243] Sleep (dwMilliseconds=0x3e8) [0192.244] Sleep (dwMilliseconds=0x3e8) [0192.245] Sleep (dwMilliseconds=0x3e8) [0192.247] Sleep (dwMilliseconds=0x3e8) [0192.249] Sleep (dwMilliseconds=0x3e8) [0192.250] Sleep (dwMilliseconds=0x3e8) [0192.253] Sleep (dwMilliseconds=0x3e8) [0192.254] Sleep (dwMilliseconds=0x3e8) [0192.255] Sleep (dwMilliseconds=0x3e8) [0192.257] Sleep (dwMilliseconds=0x3e8) [0192.259] Sleep (dwMilliseconds=0x3e8) [0192.263] Sleep (dwMilliseconds=0x3e8) [0192.264] Sleep (dwMilliseconds=0x3e8) [0192.266] Sleep (dwMilliseconds=0x3e8) [0192.268] Sleep (dwMilliseconds=0x3e8) [0192.270] Sleep (dwMilliseconds=0x3e8) [0192.271] Sleep (dwMilliseconds=0x3e8) [0192.278] Sleep (dwMilliseconds=0x3e8) [0192.282] Sleep (dwMilliseconds=0x3e8) [0192.296] Sleep (dwMilliseconds=0x3e8) [0192.298] Sleep (dwMilliseconds=0x3e8) [0192.300] Sleep (dwMilliseconds=0x3e8) [0192.303] Sleep (dwMilliseconds=0x3e8) [0192.319] Sleep (dwMilliseconds=0x3e8) [0192.320] Sleep (dwMilliseconds=0x3e8) [0192.322] Sleep (dwMilliseconds=0x3e8) [0192.323] Sleep (dwMilliseconds=0x3e8) [0192.325] Sleep (dwMilliseconds=0x3e8) [0192.326] Sleep (dwMilliseconds=0x3e8) [0192.359] Sleep (dwMilliseconds=0x3e8) [0192.361] Sleep (dwMilliseconds=0x3e8) [0192.365] Sleep (dwMilliseconds=0x3e8) [0192.366] Sleep (dwMilliseconds=0x3e8) [0192.370] Sleep (dwMilliseconds=0x3e8) [0192.373] Sleep (dwMilliseconds=0x3e8) [0192.375] Sleep (dwMilliseconds=0x3e8) [0192.376] Sleep (dwMilliseconds=0x3e8) [0192.378] Sleep (dwMilliseconds=0x3e8) [0192.379] Sleep (dwMilliseconds=0x3e8) [0192.381] Sleep (dwMilliseconds=0x3e8) [0192.382] Sleep (dwMilliseconds=0x3e8) [0192.387] Sleep (dwMilliseconds=0x3e8) [0192.389] Sleep (dwMilliseconds=0x3e8) [0192.390] Sleep (dwMilliseconds=0x3e8) [0192.391] Sleep (dwMilliseconds=0x3e8) [0192.393] Sleep (dwMilliseconds=0x3e8) [0192.395] Sleep (dwMilliseconds=0x3e8) [0192.398] Sleep (dwMilliseconds=0x3e8) [0192.424] Sleep (dwMilliseconds=0x3e8) [0192.426] Sleep (dwMilliseconds=0x3e8) [0192.428] Sleep (dwMilliseconds=0x3e8) [0192.431] Sleep (dwMilliseconds=0x3e8) [0192.434] Sleep (dwMilliseconds=0x3e8) [0192.436] Sleep (dwMilliseconds=0x3e8) [0192.437] Sleep (dwMilliseconds=0x3e8) [0192.439] Sleep (dwMilliseconds=0x3e8) [0192.440] Sleep (dwMilliseconds=0x3e8) [0192.442] Sleep (dwMilliseconds=0x3e8) [0192.443] Sleep (dwMilliseconds=0x3e8) [0192.448] Sleep (dwMilliseconds=0x3e8) [0192.451] Sleep (dwMilliseconds=0x3e8) [0192.452] Sleep (dwMilliseconds=0x3e8) [0192.453] Sleep (dwMilliseconds=0x3e8) [0192.455] Sleep (dwMilliseconds=0x3e8) [0192.457] Sleep (dwMilliseconds=0x3e8) [0192.462] Sleep (dwMilliseconds=0x3e8) [0192.468] Sleep (dwMilliseconds=0x3e8) [0192.472] Sleep (dwMilliseconds=0x3e8) [0192.473] Sleep (dwMilliseconds=0x3e8) [0192.474] Sleep (dwMilliseconds=0x3e8) [0192.482] Sleep (dwMilliseconds=0x3e8) [0192.483] Sleep (dwMilliseconds=0x3e8) [0192.484] Sleep (dwMilliseconds=0x3e8) [0192.486] Sleep (dwMilliseconds=0x3e8) [0192.507] Sleep (dwMilliseconds=0x3e8) [0192.509] Sleep (dwMilliseconds=0x3e8) [0192.512] Sleep (dwMilliseconds=0x3e8) [0192.513] Sleep (dwMilliseconds=0x3e8) [0192.517] Sleep (dwMilliseconds=0x3e8) [0192.518] Sleep (dwMilliseconds=0x3e8) [0192.520] Sleep (dwMilliseconds=0x3e8) [0192.523] Sleep (dwMilliseconds=0x3e8) [0192.524] Sleep (dwMilliseconds=0x3e8) [0192.526] Sleep (dwMilliseconds=0x3e8) [0192.527] Sleep (dwMilliseconds=0x3e8) [0192.529] Sleep (dwMilliseconds=0x3e8) [0192.530] Sleep (dwMilliseconds=0x3e8) [0192.542] Sleep (dwMilliseconds=0x3e8) [0192.543] Sleep (dwMilliseconds=0x3e8) [0192.545] Sleep (dwMilliseconds=0x3e8) [0192.546] Sleep (dwMilliseconds=0x3e8) [0192.548] Sleep (dwMilliseconds=0x3e8) [0192.550] Sleep (dwMilliseconds=0x3e8) [0192.551] Sleep (dwMilliseconds=0x3e8) [0192.553] Sleep (dwMilliseconds=0x3e8) [0192.554] Sleep (dwMilliseconds=0x3e8) [0192.557] Sleep (dwMilliseconds=0x3e8) [0192.559] Sleep (dwMilliseconds=0x3e8) [0192.561] Sleep (dwMilliseconds=0x3e8) [0192.562] Sleep (dwMilliseconds=0x3e8) [0192.564] Sleep (dwMilliseconds=0x3e8) [0192.565] Sleep (dwMilliseconds=0x3e8) [0192.572] Sleep (dwMilliseconds=0x3e8) [0192.576] Sleep (dwMilliseconds=0x3e8) [0192.578] Sleep (dwMilliseconds=0x3e8) [0192.582] Sleep (dwMilliseconds=0x3e8) [0192.583] Sleep (dwMilliseconds=0x3e8) [0192.585] Sleep (dwMilliseconds=0x3e8) [0192.586] Sleep (dwMilliseconds=0x3e8) [0192.588] Sleep (dwMilliseconds=0x3e8) [0192.589] Sleep (dwMilliseconds=0x3e8) [0192.591] Sleep (dwMilliseconds=0x3e8) [0192.592] Sleep (dwMilliseconds=0x3e8) [0192.594] Sleep (dwMilliseconds=0x3e8) [0192.595] Sleep (dwMilliseconds=0x3e8) [0192.598] Sleep (dwMilliseconds=0x3e8) [0192.600] Sleep (dwMilliseconds=0x3e8) [0192.601] Sleep (dwMilliseconds=0x3e8) [0192.603] Sleep (dwMilliseconds=0x3e8) [0192.605] Sleep (dwMilliseconds=0x3e8) [0192.607] Sleep (dwMilliseconds=0x3e8) [0192.608] Sleep (dwMilliseconds=0x3e8) [0192.610] Sleep (dwMilliseconds=0x3e8) [0192.611] Sleep (dwMilliseconds=0x3e8) [0192.613] Sleep (dwMilliseconds=0x3e8) [0192.614] Sleep (dwMilliseconds=0x3e8) [0192.616] Sleep (dwMilliseconds=0x3e8) [0192.617] Sleep (dwMilliseconds=0x3e8) [0192.620] Sleep (dwMilliseconds=0x3e8) [0192.622] Sleep (dwMilliseconds=0x3e8) [0192.624] Sleep (dwMilliseconds=0x3e8) [0192.625] Sleep (dwMilliseconds=0x3e8) [0192.627] Sleep (dwMilliseconds=0x3e8) [0192.630] Sleep (dwMilliseconds=0x3e8) [0192.632] Sleep (dwMilliseconds=0x3e8) [0192.633] Sleep (dwMilliseconds=0x3e8) [0192.635] Sleep (dwMilliseconds=0x3e8) [0192.636] Sleep (dwMilliseconds=0x3e8) [0192.638] Sleep (dwMilliseconds=0x3e8) [0192.639] Sleep (dwMilliseconds=0x3e8) [0192.642] Sleep (dwMilliseconds=0x3e8) [0192.644] Sleep (dwMilliseconds=0x3e8) [0192.645] Sleep (dwMilliseconds=0x3e8) [0192.647] Sleep (dwMilliseconds=0x3e8) [0192.648] Sleep (dwMilliseconds=0x3e8) [0192.650] Sleep (dwMilliseconds=0x3e8) [0192.651] Sleep (dwMilliseconds=0x3e8) [0192.653] Sleep (dwMilliseconds=0x3e8) [0192.656] Sleep (dwMilliseconds=0x3e8) [0192.657] Sleep (dwMilliseconds=0x3e8) [0192.659] Sleep (dwMilliseconds=0x3e8) [0192.662] Sleep (dwMilliseconds=0x3e8) [0192.664] Sleep (dwMilliseconds=0x3e8) [0192.671] Sleep (dwMilliseconds=0x3e8) [0192.672] Sleep (dwMilliseconds=0x3e8) [0192.674] Sleep (dwMilliseconds=0x3e8) [0192.675] Sleep (dwMilliseconds=0x3e8) [0192.677] Sleep (dwMilliseconds=0x3e8) [0192.678] Sleep (dwMilliseconds=0x3e8) [0192.681] Sleep (dwMilliseconds=0x3e8) [0192.683] Sleep (dwMilliseconds=0x3e8) [0192.685] Sleep (dwMilliseconds=0x3e8) [0192.696] Sleep (dwMilliseconds=0x3e8) [0192.698] Sleep (dwMilliseconds=0x3e8) [0192.699] Sleep (dwMilliseconds=0x3e8) [0192.701] Sleep (dwMilliseconds=0x3e8) [0192.702] Sleep (dwMilliseconds=0x3e8) [0192.704] Sleep (dwMilliseconds=0x3e8) [0192.705] Sleep (dwMilliseconds=0x3e8) [0192.708] Sleep (dwMilliseconds=0x3e8) [0192.710] Sleep (dwMilliseconds=0x3e8) [0192.711] Sleep (dwMilliseconds=0x3e8) [0192.713] Sleep (dwMilliseconds=0x3e8) [0192.714] Sleep (dwMilliseconds=0x3e8) [0192.716] Sleep (dwMilliseconds=0x3e8) [0192.717] Sleep (dwMilliseconds=0x3e8) [0192.720] Sleep (dwMilliseconds=0x3e8) [0192.723] Sleep (dwMilliseconds=0x3e8) [0192.725] Sleep (dwMilliseconds=0x3e8) [0192.727] Sleep (dwMilliseconds=0x3e8) [0192.728] Sleep (dwMilliseconds=0x3e8) [0192.730] Sleep (dwMilliseconds=0x3e8) [0192.731] Sleep (dwMilliseconds=0x3e8) [0192.733] Sleep (dwMilliseconds=0x3e8) [0192.740] Sleep (dwMilliseconds=0x3e8) [0192.742] Sleep (dwMilliseconds=0x3e8) [0192.748] Sleep (dwMilliseconds=0x3e8) [0192.750] Sleep (dwMilliseconds=0x3e8) [0192.751] Sleep (dwMilliseconds=0x3e8) [0192.753] Sleep (dwMilliseconds=0x3e8) [0192.758] Sleep (dwMilliseconds=0x3e8) [0192.760] Sleep (dwMilliseconds=0x3e8) [0192.774] Sleep (dwMilliseconds=0x3e8) [0192.778] Sleep (dwMilliseconds=0x3e8) [0192.780] Sleep (dwMilliseconds=0x3e8) [0192.782] Sleep (dwMilliseconds=0x3e8) [0192.786] Sleep (dwMilliseconds=0x3e8) [0192.792] Sleep (dwMilliseconds=0x3e8) [0192.794] Sleep (dwMilliseconds=0x3e8) [0192.813] Sleep (dwMilliseconds=0x3e8) [0192.815] Sleep (dwMilliseconds=0x3e8) [0192.817] Sleep (dwMilliseconds=0x3e8) [0192.819] Sleep (dwMilliseconds=0x3e8) [0192.822] Sleep (dwMilliseconds=0x3e8) [0192.823] Sleep (dwMilliseconds=0x3e8) [0192.825] Sleep (dwMilliseconds=0x3e8) [0192.828] Sleep (dwMilliseconds=0x3e8) [0192.829] Sleep (dwMilliseconds=0x3e8) [0192.834] Sleep (dwMilliseconds=0x3e8) [0192.836] Sleep (dwMilliseconds=0x3e8) [0192.842] Sleep (dwMilliseconds=0x3e8) [0192.844] Sleep (dwMilliseconds=0x3e8) [0192.845] Sleep (dwMilliseconds=0x3e8) [0192.847] Sleep (dwMilliseconds=0x3e8) [0192.849] Sleep (dwMilliseconds=0x3e8) [0192.851] Sleep (dwMilliseconds=0x3e8) [0192.853] Sleep (dwMilliseconds=0x3e8) [0192.856] Sleep (dwMilliseconds=0x3e8) [0192.857] Sleep (dwMilliseconds=0x3e8) [0192.859] Sleep (dwMilliseconds=0x3e8) [0192.860] Sleep (dwMilliseconds=0x3e8) [0192.880] Sleep (dwMilliseconds=0x3e8) [0192.881] Sleep (dwMilliseconds=0x3e8) [0192.883] Sleep (dwMilliseconds=0x3e8) [0192.886] Sleep (dwMilliseconds=0x3e8) [0192.888] Sleep (dwMilliseconds=0x3e8) [0192.889] Sleep (dwMilliseconds=0x3e8) [0192.891] Sleep (dwMilliseconds=0x3e8) [0192.892] Sleep (dwMilliseconds=0x3e8) [0192.894] Sleep (dwMilliseconds=0x3e8) [0192.895] Sleep (dwMilliseconds=0x3e8) [0192.897] Sleep (dwMilliseconds=0x3e8) [0192.898] Sleep (dwMilliseconds=0x3e8) [0192.900] Sleep (dwMilliseconds=0x3e8) [0192.901] Sleep (dwMilliseconds=0x3e8) [0192.903] Sleep (dwMilliseconds=0x3e8) [0192.905] Sleep (dwMilliseconds=0x3e8) [0192.910] Sleep (dwMilliseconds=0x3e8) [0192.912] Sleep (dwMilliseconds=0x3e8) [0192.946] Sleep (dwMilliseconds=0x3e8) [0192.947] Sleep (dwMilliseconds=0x3e8) [0192.949] Sleep (dwMilliseconds=0x3e8) [0192.952] Sleep (dwMilliseconds=0x3e8) [0192.953] Sleep (dwMilliseconds=0x3e8) [0192.955] Sleep (dwMilliseconds=0x3e8) [0192.957] Sleep (dwMilliseconds=0x3e8) [0192.960] Sleep (dwMilliseconds=0x3e8) [0192.965] Sleep (dwMilliseconds=0x3e8) [0192.968] Sleep (dwMilliseconds=0x3e8) [0192.969] Sleep (dwMilliseconds=0x3e8) [0192.970] Sleep (dwMilliseconds=0x3e8) [0192.972] Sleep (dwMilliseconds=0x3e8) [0192.975] Sleep (dwMilliseconds=0x3e8) [0192.976] Sleep (dwMilliseconds=0x3e8) [0192.982] Sleep (dwMilliseconds=0x3e8) [0192.983] Sleep (dwMilliseconds=0x3e8) [0192.987] Sleep (dwMilliseconds=0x3e8) [0192.990] Sleep (dwMilliseconds=0x3e8) [0192.994] Sleep (dwMilliseconds=0x3e8) [0192.995] Sleep (dwMilliseconds=0x3e8) [0192.996] Sleep (dwMilliseconds=0x3e8) [0192.998] Sleep (dwMilliseconds=0x3e8) [0192.999] Sleep (dwMilliseconds=0x3e8) [0193.001] Sleep (dwMilliseconds=0x3e8) [0193.002] Sleep (dwMilliseconds=0x3e8) [0193.004] Sleep (dwMilliseconds=0x3e8) [0193.006] Sleep (dwMilliseconds=0x3e8) [0193.007] Sleep (dwMilliseconds=0x3e8) [0193.010] Sleep (dwMilliseconds=0x3e8) [0193.011] Sleep (dwMilliseconds=0x3e8) [0193.014] Sleep (dwMilliseconds=0x3e8) [0193.016] Sleep (dwMilliseconds=0x3e8) [0193.017] Sleep (dwMilliseconds=0x3e8) [0193.019] Sleep (dwMilliseconds=0x3e8) [0193.021] Sleep (dwMilliseconds=0x3e8) [0193.022] Sleep (dwMilliseconds=0x3e8) [0193.024] Sleep (dwMilliseconds=0x3e8) [0193.030] Sleep (dwMilliseconds=0x3e8) [0193.032] Sleep (dwMilliseconds=0x3e8) [0193.033] Sleep (dwMilliseconds=0x3e8) [0193.034] Sleep (dwMilliseconds=0x3e8) [0193.039] Sleep (dwMilliseconds=0x3e8) [0193.040] Sleep (dwMilliseconds=0x3e8) [0193.042] Sleep (dwMilliseconds=0x3e8) [0193.050] Sleep (dwMilliseconds=0x3e8) [0193.051] Sleep (dwMilliseconds=0x3e8) [0193.053] Sleep (dwMilliseconds=0x3e8) [0193.054] Sleep (dwMilliseconds=0x3e8) [0193.056] Sleep (dwMilliseconds=0x3e8) [0193.058] Sleep (dwMilliseconds=0x3e8) [0193.060] Sleep (dwMilliseconds=0x3e8) [0193.064] Sleep (dwMilliseconds=0x3e8) [0193.065] Sleep (dwMilliseconds=0x3e8) [0193.066] Sleep (dwMilliseconds=0x3e8) [0193.073] Sleep (dwMilliseconds=0x3e8) [0193.076] Sleep (dwMilliseconds=0x3e8) [0193.096] Sleep (dwMilliseconds=0x3e8) [0193.098] Sleep (dwMilliseconds=0x3e8) [0193.099] Sleep (dwMilliseconds=0x3e8) [0193.101] Sleep (dwMilliseconds=0x3e8) [0193.102] Sleep (dwMilliseconds=0x3e8) [0193.104] Sleep (dwMilliseconds=0x3e8) [0193.105] Sleep (dwMilliseconds=0x3e8) [0193.107] Sleep (dwMilliseconds=0x3e8) [0193.108] Sleep (dwMilliseconds=0x3e8) [0193.110] Sleep (dwMilliseconds=0x3e8) [0193.111] Sleep (dwMilliseconds=0x3e8) [0193.113] Sleep (dwMilliseconds=0x3e8) [0193.114] Sleep (dwMilliseconds=0x3e8) [0193.116] Sleep (dwMilliseconds=0x3e8) [0193.117] Sleep (dwMilliseconds=0x3e8) [0193.119] Sleep (dwMilliseconds=0x3e8) [0193.121] Sleep (dwMilliseconds=0x3e8) [0193.123] Sleep (dwMilliseconds=0x3e8) [0193.124] Sleep (dwMilliseconds=0x3e8) [0193.128] Sleep (dwMilliseconds=0x3e8) [0193.130] Sleep (dwMilliseconds=0x3e8) [0193.131] Sleep (dwMilliseconds=0x3e8) [0193.133] Sleep (dwMilliseconds=0x3e8) [0193.134] Sleep (dwMilliseconds=0x3e8) [0193.136] Sleep (dwMilliseconds=0x3e8) [0193.137] Sleep (dwMilliseconds=0x3e8) [0193.139] Sleep (dwMilliseconds=0x3e8) [0193.140] Sleep (dwMilliseconds=0x3e8) [0193.142] Sleep (dwMilliseconds=0x3e8) [0193.143] Sleep (dwMilliseconds=0x3e8) [0193.145] Sleep (dwMilliseconds=0x3e8) [0193.146] Sleep (dwMilliseconds=0x3e8) [0193.148] Sleep (dwMilliseconds=0x3e8) [0193.150] Sleep (dwMilliseconds=0x3e8) [0193.152] Sleep (dwMilliseconds=0x3e8) [0193.153] Sleep (dwMilliseconds=0x3e8) [0193.155] Sleep (dwMilliseconds=0x3e8) [0193.157] Sleep (dwMilliseconds=0x3e8) [0193.160] Sleep (dwMilliseconds=0x3e8) [0193.164] Sleep (dwMilliseconds=0x3e8) [0193.165] Sleep (dwMilliseconds=0x3e8) [0193.167] Sleep (dwMilliseconds=0x3e8) [0193.168] Sleep (dwMilliseconds=0x3e8) [0193.170] Sleep (dwMilliseconds=0x3e8) [0193.171] Sleep (dwMilliseconds=0x3e8) [0193.173] Sleep (dwMilliseconds=0x3e8) [0193.174] Sleep (dwMilliseconds=0x3e8) [0193.176] Sleep (dwMilliseconds=0x3e8) [0193.180] Sleep (dwMilliseconds=0x3e8) [0193.182] Sleep (dwMilliseconds=0x3e8) [0193.183] Sleep (dwMilliseconds=0x3e8) [0193.185] Sleep (dwMilliseconds=0x3e8) [0193.188] Sleep (dwMilliseconds=0x3e8) [0193.190] Sleep (dwMilliseconds=0x3e8) [0193.192] Sleep (dwMilliseconds=0x3e8) [0193.193] Sleep (dwMilliseconds=0x3e8) [0193.195] Sleep (dwMilliseconds=0x3e8) [0193.196] Sleep (dwMilliseconds=0x3e8) [0193.198] Sleep (dwMilliseconds=0x3e8) [0193.203] Sleep (dwMilliseconds=0x3e8) [0193.205] Sleep (dwMilliseconds=0x3e8) [0193.206] Sleep (dwMilliseconds=0x3e8) [0193.208] Sleep (dwMilliseconds=0x3e8) [0193.209] Sleep (dwMilliseconds=0x3e8) [0193.211] Sleep (dwMilliseconds=0x3e8) [0193.218] Sleep (dwMilliseconds=0x3e8) [0193.220] Sleep (dwMilliseconds=0x3e8) [0193.221] Sleep (dwMilliseconds=0x3e8) [0193.223] Sleep (dwMilliseconds=0x3e8) [0193.224] Sleep (dwMilliseconds=0x3e8) [0193.226] Sleep (dwMilliseconds=0x3e8) [0193.227] Sleep (dwMilliseconds=0x3e8) [0193.229] Sleep (dwMilliseconds=0x3e8) [0193.230] Sleep (dwMilliseconds=0x3e8) [0193.256] Sleep (dwMilliseconds=0x3e8) [0193.258] Sleep (dwMilliseconds=0x3e8) [0193.261] Sleep (dwMilliseconds=0x3e8) [0193.262] Sleep (dwMilliseconds=0x3e8) [0193.264] Sleep (dwMilliseconds=0x3e8) [0193.300] Sleep (dwMilliseconds=0x3e8) [0193.301] Sleep (dwMilliseconds=0x3e8) [0193.303] Sleep (dwMilliseconds=0x3e8) [0193.305] Sleep (dwMilliseconds=0x3e8) [0193.306] Sleep (dwMilliseconds=0x3e8) [0193.308] Sleep (dwMilliseconds=0x3e8) [0193.309] Sleep (dwMilliseconds=0x3e8) [0193.313] Sleep (dwMilliseconds=0x3e8) [0193.328] Sleep (dwMilliseconds=0x3e8) [0193.337] Sleep (dwMilliseconds=0x3e8) [0193.338] Sleep (dwMilliseconds=0x3e8) [0193.340] Sleep (dwMilliseconds=0x3e8) [0193.382] Sleep (dwMilliseconds=0x3e8) [0193.383] Sleep (dwMilliseconds=0x3e8) [0193.385] Sleep (dwMilliseconds=0x3e8) [0193.387] Sleep (dwMilliseconds=0x3e8) [0193.388] Sleep (dwMilliseconds=0x3e8) [0193.389] Sleep (dwMilliseconds=0x3e8) [0193.391] Sleep (dwMilliseconds=0x3e8) [0193.393] Sleep (dwMilliseconds=0x3e8) [0193.395] Sleep (dwMilliseconds=0x3e8) [0193.397] Sleep (dwMilliseconds=0x3e8) [0193.399] Sleep (dwMilliseconds=0x3e8) [0193.400] Sleep (dwMilliseconds=0x3e8) [0193.402] Sleep (dwMilliseconds=0x3e8) [0193.404] Sleep (dwMilliseconds=0x3e8) [0193.405] Sleep (dwMilliseconds=0x3e8) [0193.407] Sleep (dwMilliseconds=0x3e8) [0193.411] Sleep (dwMilliseconds=0x3e8) [0193.413] Sleep (dwMilliseconds=0x3e8) [0193.415] Sleep (dwMilliseconds=0x3e8) [0193.416] Sleep (dwMilliseconds=0x3e8) [0193.421] Sleep (dwMilliseconds=0x3e8) [0193.423] Sleep (dwMilliseconds=0x3e8) [0193.424] Sleep (dwMilliseconds=0x3e8) [0193.441] Sleep (dwMilliseconds=0x3e8) [0193.443] Sleep (dwMilliseconds=0x3e8) [0193.444] Sleep (dwMilliseconds=0x3e8) [0193.446] Sleep (dwMilliseconds=0x3e8) [0193.447] Sleep (dwMilliseconds=0x3e8) [0193.449] Sleep (dwMilliseconds=0x3e8) [0193.461] Sleep (dwMilliseconds=0x3e8) [0193.464] Sleep (dwMilliseconds=0x3e8) [0193.471] Sleep (dwMilliseconds=0x3e8) [0193.475] Sleep (dwMilliseconds=0x3e8) [0193.481] Sleep (dwMilliseconds=0x3e8) [0193.484] Sleep (dwMilliseconds=0x3e8) [0193.488] Sleep (dwMilliseconds=0x3e8) [0193.491] Sleep (dwMilliseconds=0x3e8) [0193.497] Sleep (dwMilliseconds=0x3e8) [0193.500] Sleep (dwMilliseconds=0x3e8) [0193.502] Sleep (dwMilliseconds=0x3e8) [0193.505] Sleep (dwMilliseconds=0x3e8) [0193.535] Sleep (dwMilliseconds=0x3e8) [0193.537] Sleep (dwMilliseconds=0x3e8) [0193.538] Sleep (dwMilliseconds=0x3e8) [0193.544] Sleep (dwMilliseconds=0x3e8) [0193.546] Sleep (dwMilliseconds=0x3e8) [0193.547] Sleep (dwMilliseconds=0x3e8) [0193.549] Sleep (dwMilliseconds=0x3e8) [0193.550] Sleep (dwMilliseconds=0x3e8) [0193.553] Sleep (dwMilliseconds=0x3e8) [0193.566] Sleep (dwMilliseconds=0x3e8) [0193.571] Sleep (dwMilliseconds=0x3e8) [0193.576] Sleep (dwMilliseconds=0x3e8) [0193.577] Sleep (dwMilliseconds=0x3e8) [0193.579] Sleep (dwMilliseconds=0x3e8) [0193.581] Sleep (dwMilliseconds=0x3e8) [0193.582] Sleep (dwMilliseconds=0x3e8) [0193.584] Sleep (dwMilliseconds=0x3e8) [0193.585] Sleep (dwMilliseconds=0x3e8) [0193.588] Sleep (dwMilliseconds=0x3e8) [0193.591] Sleep (dwMilliseconds=0x3e8) [0193.593] Sleep (dwMilliseconds=0x3e8) [0193.596] Sleep (dwMilliseconds=0x3e8) [0193.597] Sleep (dwMilliseconds=0x3e8) [0193.599] Sleep (dwMilliseconds=0x3e8) [0193.601] Sleep (dwMilliseconds=0x3e8) [0193.604] Sleep (dwMilliseconds=0x3e8) [0193.605] Sleep (dwMilliseconds=0x3e8) [0193.607] Sleep (dwMilliseconds=0x3e8) [0193.609] Sleep (dwMilliseconds=0x3e8) [0193.610] Sleep (dwMilliseconds=0x3e8) [0193.612] Sleep (dwMilliseconds=0x3e8) [0193.613] Sleep (dwMilliseconds=0x3e8) [0193.615] Sleep (dwMilliseconds=0x3e8) [0193.616] Sleep (dwMilliseconds=0x3e8) [0193.626] Sleep (dwMilliseconds=0x3e8) [0193.628] Sleep (dwMilliseconds=0x3e8) [0193.630] Sleep (dwMilliseconds=0x3e8) [0193.634] Sleep (dwMilliseconds=0x3e8) [0193.636] Sleep (dwMilliseconds=0x3e8) [0193.637] Sleep (dwMilliseconds=0x3e8) [0193.639] Sleep (dwMilliseconds=0x3e8) [0193.640] Sleep (dwMilliseconds=0x3e8) [0193.642] Sleep (dwMilliseconds=0x3e8) [0193.643] Sleep (dwMilliseconds=0x3e8) [0193.645] Sleep (dwMilliseconds=0x3e8) [0193.649] Sleep (dwMilliseconds=0x3e8) [0193.662] Sleep (dwMilliseconds=0x3e8) [0193.664] Sleep (dwMilliseconds=0x3e8) [0193.666] Sleep (dwMilliseconds=0x3e8) [0193.668] Sleep (dwMilliseconds=0x3e8) [0193.670] Sleep (dwMilliseconds=0x3e8) [0193.671] Sleep (dwMilliseconds=0x3e8) [0193.673] Sleep (dwMilliseconds=0x3e8) [0193.678] Sleep (dwMilliseconds=0x3e8) [0193.682] Sleep (dwMilliseconds=0x3e8) [0193.684] Sleep (dwMilliseconds=0x3e8) [0193.691] Sleep (dwMilliseconds=0x3e8) [0193.874] Sleep (dwMilliseconds=0x3e8) [0193.915] Sleep (dwMilliseconds=0x3e8) [0193.952] Sleep (dwMilliseconds=0x3e8) [0193.987] Sleep (dwMilliseconds=0x3e8) [0194.022] Sleep (dwMilliseconds=0x3e8) [0194.057] Sleep (dwMilliseconds=0x3e8) [0194.095] Sleep (dwMilliseconds=0x3e8) [0194.131] Sleep (dwMilliseconds=0x3e8) [0194.170] Sleep (dwMilliseconds=0x3e8) [0194.207] Sleep (dwMilliseconds=0x3e8) [0194.243] Sleep (dwMilliseconds=0x3e8) [0194.280] Sleep (dwMilliseconds=0x3e8) [0194.344] Sleep (dwMilliseconds=0x3e8) [0194.376] Sleep (dwMilliseconds=0x3e8) [0194.377] Sleep (dwMilliseconds=0x3e8) [0194.379] Sleep (dwMilliseconds=0x3e8) [0194.380] Sleep (dwMilliseconds=0x3e8) [0194.382] Sleep (dwMilliseconds=0x3e8) [0194.385] Sleep (dwMilliseconds=0x3e8) [0194.387] Sleep (dwMilliseconds=0x3e8) [0194.388] Sleep (dwMilliseconds=0x3e8) [0194.390] Sleep (dwMilliseconds=0x3e8) [0194.394] Sleep (dwMilliseconds=0x3e8) [0194.396] Sleep (dwMilliseconds=0x3e8) [0194.399] Sleep (dwMilliseconds=0x3e8) [0194.405] Sleep (dwMilliseconds=0x3e8) [0194.407] Sleep (dwMilliseconds=0x3e8) [0194.409] Sleep (dwMilliseconds=0x3e8) [0194.410] Sleep (dwMilliseconds=0x3e8) [0194.412] Sleep (dwMilliseconds=0x3e8) [0194.414] Sleep (dwMilliseconds=0x3e8) [0194.416] Sleep (dwMilliseconds=0x3e8) [0194.418] Sleep (dwMilliseconds=0x3e8) [0194.419] Sleep (dwMilliseconds=0x3e8) [0194.420] Sleep (dwMilliseconds=0x3e8) [0194.422] Sleep (dwMilliseconds=0x3e8) [0194.426] Sleep (dwMilliseconds=0x3e8) [0194.429] Sleep (dwMilliseconds=0x3e8) [0194.433] Sleep (dwMilliseconds=0x3e8) [0194.436] Sleep (dwMilliseconds=0x3e8) [0194.437] Sleep (dwMilliseconds=0x3e8) [0194.439] Sleep (dwMilliseconds=0x3e8) [0194.441] Sleep (dwMilliseconds=0x3e8) [0194.442] Sleep (dwMilliseconds=0x3e8) [0194.444] Sleep (dwMilliseconds=0x3e8) [0194.447] Sleep (dwMilliseconds=0x3e8) [0194.449] Sleep (dwMilliseconds=0x3e8) [0194.451] Sleep (dwMilliseconds=0x3e8) [0194.464] Sleep (dwMilliseconds=0x3e8) [0194.466] Sleep (dwMilliseconds=0x3e8) [0194.467] Sleep (dwMilliseconds=0x3e8) [0194.469] Sleep (dwMilliseconds=0x3e8) [0194.470] Sleep (dwMilliseconds=0x3e8) [0194.478] Sleep (dwMilliseconds=0x3e8) [0194.482] Sleep (dwMilliseconds=0x3e8) [0194.485] Sleep (dwMilliseconds=0x3e8) [0194.487] Sleep (dwMilliseconds=0x3e8) [0194.488] Sleep (dwMilliseconds=0x3e8) [0194.490] Sleep (dwMilliseconds=0x3e8) [0194.491] Sleep (dwMilliseconds=0x3e8) [0194.495] Sleep (dwMilliseconds=0x3e8) [0194.496] Sleep (dwMilliseconds=0x3e8) [0194.499] Sleep (dwMilliseconds=0x3e8) [0194.500] Sleep (dwMilliseconds=0x3e8) [0194.503] Sleep (dwMilliseconds=0x3e8) [0194.504] Sleep (dwMilliseconds=0x3e8) [0194.505] Sleep (dwMilliseconds=0x3e8) [0194.507] Sleep (dwMilliseconds=0x3e8) [0194.509] Sleep (dwMilliseconds=0x3e8) [0194.510] Sleep (dwMilliseconds=0x3e8) [0194.512] Sleep (dwMilliseconds=0x3e8) [0194.513] Sleep (dwMilliseconds=0x3e8) [0194.515] Sleep (dwMilliseconds=0x3e8) [0194.516] Sleep (dwMilliseconds=0x3e8) [0194.518] Sleep (dwMilliseconds=0x3e8) [0194.520] Sleep (dwMilliseconds=0x3e8) [0194.521] Sleep (dwMilliseconds=0x3e8) [0194.525] Sleep (dwMilliseconds=0x3e8) [0194.529] Sleep (dwMilliseconds=0x3e8) [0194.554] Sleep (dwMilliseconds=0x3e8) [0194.556] Sleep (dwMilliseconds=0x3e8) [0194.559] Sleep (dwMilliseconds=0x3e8) [0194.561] Sleep (dwMilliseconds=0x3e8) [0194.575] Sleep (dwMilliseconds=0x3e8) [0194.577] Sleep (dwMilliseconds=0x3e8) [0194.582] Sleep (dwMilliseconds=0x3e8) [0194.584] Sleep (dwMilliseconds=0x3e8) [0194.588] Sleep (dwMilliseconds=0x3e8) [0194.589] Sleep (dwMilliseconds=0x3e8) [0194.590] Sleep (dwMilliseconds=0x3e8) [0194.592] Sleep (dwMilliseconds=0x3e8) [0194.594] Sleep (dwMilliseconds=0x3e8) [0194.595] Sleep (dwMilliseconds=0x3e8) [0194.688] Sleep (dwMilliseconds=0x3e8) [0194.690] Sleep (dwMilliseconds=0x3e8) [0194.691] Sleep (dwMilliseconds=0x3e8) [0194.693] Sleep (dwMilliseconds=0x3e8) [0194.694] Sleep (dwMilliseconds=0x3e8) [0194.697] Sleep (dwMilliseconds=0x3e8) [0194.698] Sleep (dwMilliseconds=0x3e8) [0194.700] Sleep (dwMilliseconds=0x3e8) [0194.701] Sleep (dwMilliseconds=0x3e8) [0194.703] Sleep (dwMilliseconds=0x3e8) [0194.706] Sleep (dwMilliseconds=0x3e8) [0194.708] Sleep (dwMilliseconds=0x3e8) [0194.709] Sleep (dwMilliseconds=0x3e8) [0194.712] Sleep (dwMilliseconds=0x3e8) [0194.714] Sleep (dwMilliseconds=0x3e8) [0194.715] Sleep (dwMilliseconds=0x3e8) [0194.717] Sleep (dwMilliseconds=0x3e8) [0194.719] Sleep (dwMilliseconds=0x3e8) [0194.720] Sleep (dwMilliseconds=0x3e8) [0194.723] Sleep (dwMilliseconds=0x3e8) [0194.725] Sleep (dwMilliseconds=0x3e8) [0194.726] Sleep (dwMilliseconds=0x3e8) [0194.728] Sleep (dwMilliseconds=0x3e8) [0194.729] Sleep (dwMilliseconds=0x3e8) [0194.731] Sleep (dwMilliseconds=0x3e8) [0194.732] Sleep (dwMilliseconds=0x3e8) [0194.734] Sleep (dwMilliseconds=0x3e8) [0194.745] Sleep (dwMilliseconds=0x3e8) [0194.748] Sleep (dwMilliseconds=0x3e8) [0194.751] Sleep (dwMilliseconds=0x3e8) [0194.754] Sleep (dwMilliseconds=0x3e8) [0194.756] Sleep (dwMilliseconds=0x3e8) [0195.611] Sleep (dwMilliseconds=0x3e8) [0195.622] Sleep (dwMilliseconds=0x3e8) [0195.623] Sleep (dwMilliseconds=0x3e8) [0195.625] Sleep (dwMilliseconds=0x3e8) [0195.627] Sleep (dwMilliseconds=0x3e8) [0195.628] Sleep (dwMilliseconds=0x3e8) [0195.630] Sleep (dwMilliseconds=0x3e8) [0195.631] Sleep (dwMilliseconds=0x3e8) [0195.633] Sleep (dwMilliseconds=0x3e8) [0195.634] Sleep (dwMilliseconds=0x3e8) [0195.636] Sleep (dwMilliseconds=0x3e8) [0195.637] Sleep (dwMilliseconds=0x3e8) [0195.639] Sleep (dwMilliseconds=0x3e8) [0195.640] Sleep (dwMilliseconds=0x3e8) [0195.644] Sleep (dwMilliseconds=0x3e8) [0195.648] Sleep (dwMilliseconds=0x3e8) [0195.649] Sleep (dwMilliseconds=0x3e8) [0195.651] Sleep (dwMilliseconds=0x3e8) [0195.653] Sleep (dwMilliseconds=0x3e8) [0195.654] Sleep (dwMilliseconds=0x3e8) [0195.656] Sleep (dwMilliseconds=0x3e8) [0195.657] Sleep (dwMilliseconds=0x3e8) [0195.659] Sleep (dwMilliseconds=0x3e8) [0195.661] Sleep (dwMilliseconds=0x3e8) [0195.667] Sleep (dwMilliseconds=0x3e8) [0195.669] Sleep (dwMilliseconds=0x3e8) [0195.670] Sleep (dwMilliseconds=0x3e8) [0195.672] Sleep (dwMilliseconds=0x3e8) [0195.674] Sleep (dwMilliseconds=0x3e8) [0195.681] Sleep (dwMilliseconds=0x3e8) [0195.683] Sleep (dwMilliseconds=0x3e8) [0195.684] Sleep (dwMilliseconds=0x3e8) [0195.685] Sleep (dwMilliseconds=0x3e8) [0195.687] Sleep (dwMilliseconds=0x3e8) [0195.688] Sleep (dwMilliseconds=0x3e8) [0195.690] Sleep (dwMilliseconds=0x3e8) [0195.692] Sleep (dwMilliseconds=0x3e8) [0195.693] Sleep (dwMilliseconds=0x3e8) [0195.695] Sleep (dwMilliseconds=0x3e8) [0195.696] Sleep (dwMilliseconds=0x3e8) [0195.698] Sleep (dwMilliseconds=0x3e8) [0195.699] Sleep (dwMilliseconds=0x3e8) [0195.701] Sleep (dwMilliseconds=0x3e8) [0195.703] Sleep (dwMilliseconds=0x3e8) [0195.705] Sleep (dwMilliseconds=0x3e8) [0195.706] Sleep (dwMilliseconds=0x3e8) [0195.708] Sleep (dwMilliseconds=0x3e8) [0195.709] Sleep (dwMilliseconds=0x3e8) [0195.711] Sleep (dwMilliseconds=0x3e8) [0195.712] Sleep (dwMilliseconds=0x3e8) [0195.714] Sleep (dwMilliseconds=0x3e8) [0195.715] Sleep (dwMilliseconds=0x3e8) [0195.717] Sleep (dwMilliseconds=0x3e8) [0195.718] Sleep (dwMilliseconds=0x3e8) [0195.720] Sleep (dwMilliseconds=0x3e8) [0195.721] Sleep (dwMilliseconds=0x3e8) [0195.723] Sleep (dwMilliseconds=0x3e8) [0195.724] Sleep (dwMilliseconds=0x3e8) [0195.726] Sleep (dwMilliseconds=0x3e8) [0195.727] Sleep (dwMilliseconds=0x3e8) [0195.730] Sleep (dwMilliseconds=0x3e8) [0195.731] Sleep (dwMilliseconds=0x3e8) [0195.733] Sleep (dwMilliseconds=0x3e8) [0195.735] Sleep (dwMilliseconds=0x3e8) [0195.739] Sleep (dwMilliseconds=0x3e8) [0195.741] Sleep (dwMilliseconds=0x3e8) [0195.742] Sleep (dwMilliseconds=0x3e8) [0195.744] Sleep (dwMilliseconds=0x3e8) [0195.745] Sleep (dwMilliseconds=0x3e8) [0195.747] Sleep (dwMilliseconds=0x3e8) [0195.750] Sleep (dwMilliseconds=0x3e8) [0195.757] Sleep (dwMilliseconds=0x3e8) [0195.759] Sleep (dwMilliseconds=0x3e8) [0195.761] Sleep (dwMilliseconds=0x3e8) [0195.762] Sleep (dwMilliseconds=0x3e8) [0195.766] Sleep (dwMilliseconds=0x3e8) [0195.768] Sleep (dwMilliseconds=0x3e8) [0195.769] Sleep (dwMilliseconds=0x3e8) [0195.771] Sleep (dwMilliseconds=0x3e8) [0195.772] Sleep (dwMilliseconds=0x3e8) [0195.774] Sleep (dwMilliseconds=0x3e8) [0195.775] Sleep (dwMilliseconds=0x3e8) [0195.777] Sleep (dwMilliseconds=0x3e8) [0195.778] Sleep (dwMilliseconds=0x3e8) [0195.780] Sleep (dwMilliseconds=0x3e8) [0195.781] Sleep (dwMilliseconds=0x3e8) [0195.783] Sleep (dwMilliseconds=0x3e8) [0195.785] Sleep (dwMilliseconds=0x3e8) [0195.789] Sleep (dwMilliseconds=0x3e8) [0196.514] Sleep (dwMilliseconds=0x3e8) [0196.516] Sleep (dwMilliseconds=0x3e8) [0196.517] Sleep (dwMilliseconds=0x3e8) [0196.518] Sleep (dwMilliseconds=0x3e8) [0196.522] Sleep (dwMilliseconds=0x3e8) [0196.523] Sleep (dwMilliseconds=0x3e8) [0196.524] Sleep (dwMilliseconds=0x3e8) [0196.526] Sleep (dwMilliseconds=0x3e8) [0196.527] Sleep (dwMilliseconds=0x3e8) [0196.529] Sleep (dwMilliseconds=0x3e8) [0196.531] Sleep (dwMilliseconds=0x3e8) [0196.532] Sleep (dwMilliseconds=0x3e8) [0196.533] Sleep (dwMilliseconds=0x3e8) [0196.535] Sleep (dwMilliseconds=0x3e8) [0196.536] Sleep (dwMilliseconds=0x3e8) [0196.543] Sleep (dwMilliseconds=0x3e8) [0196.545] Sleep (dwMilliseconds=0x3e8) [0196.546] Sleep (dwMilliseconds=0x3e8) [0196.548] Sleep (dwMilliseconds=0x3e8) [0196.549] Sleep (dwMilliseconds=0x3e8) [0196.555] Sleep (dwMilliseconds=0x3e8) [0196.558] Sleep (dwMilliseconds=0x3e8) [0196.567] Sleep (dwMilliseconds=0x3e8) [0196.569] Sleep (dwMilliseconds=0x3e8) [0196.570] Sleep (dwMilliseconds=0x3e8) [0196.572] Sleep (dwMilliseconds=0x3e8) [0196.573] Sleep (dwMilliseconds=0x3e8) [0196.575] Sleep (dwMilliseconds=0x3e8) [0196.577] Sleep (dwMilliseconds=0x3e8) [0196.578] Sleep (dwMilliseconds=0x3e8) [0196.579] Sleep (dwMilliseconds=0x3e8) [0196.581] Sleep (dwMilliseconds=0x3e8) [0196.583] Sleep (dwMilliseconds=0x3e8) [0196.584] Sleep (dwMilliseconds=0x3e8) [0196.586] Sleep (dwMilliseconds=0x3e8) [0196.587] Sleep (dwMilliseconds=0x3e8) [0196.596] Sleep (dwMilliseconds=0x3e8) [0196.598] Sleep (dwMilliseconds=0x3e8) [0196.600] Sleep (dwMilliseconds=0x3e8) [0196.602] Sleep (dwMilliseconds=0x3e8) [0196.605] Sleep (dwMilliseconds=0x3e8) [0196.606] Sleep (dwMilliseconds=0x3e8) [0196.608] Sleep (dwMilliseconds=0x3e8) [0196.610] Sleep (dwMilliseconds=0x3e8) [0196.613] Sleep (dwMilliseconds=0x3e8) [0196.615] Sleep (dwMilliseconds=0x3e8) [0196.617] Sleep (dwMilliseconds=0x3e8) [0196.619] Sleep (dwMilliseconds=0x3e8) [0196.641] Sleep (dwMilliseconds=0x3e8) [0196.643] Sleep (dwMilliseconds=0x3e8) [0196.645] Sleep (dwMilliseconds=0x3e8) [0196.647] Sleep (dwMilliseconds=0x3e8) [0196.649] Sleep (dwMilliseconds=0x3e8) [0196.651] Sleep (dwMilliseconds=0x3e8) [0196.653] Sleep (dwMilliseconds=0x3e8) [0196.655] Sleep (dwMilliseconds=0x3e8) [0196.657] Sleep (dwMilliseconds=0x3e8) [0196.659] Sleep (dwMilliseconds=0x3e8) [0196.661] Sleep (dwMilliseconds=0x3e8) [0196.663] Sleep (dwMilliseconds=0x3e8) [0196.665] Sleep (dwMilliseconds=0x3e8) [0196.667] Sleep (dwMilliseconds=0x3e8) [0196.669] Sleep (dwMilliseconds=0x3e8) [0196.671] Sleep (dwMilliseconds=0x3e8) [0196.676] Sleep (dwMilliseconds=0x3e8) [0196.677] Sleep (dwMilliseconds=0x3e8) [0196.679] Sleep (dwMilliseconds=0x3e8) [0196.681] Sleep (dwMilliseconds=0x3e8) [0196.683] Sleep (dwMilliseconds=0x3e8) [0196.685] Sleep (dwMilliseconds=0x3e8) [0196.687] Sleep (dwMilliseconds=0x3e8) [0196.689] Sleep (dwMilliseconds=0x3e8) [0196.691] Sleep (dwMilliseconds=0x3e8) [0196.693] Sleep (dwMilliseconds=0x3e8) [0196.695] Sleep (dwMilliseconds=0x3e8) [0196.697] Sleep (dwMilliseconds=0x3e8) [0196.699] Sleep (dwMilliseconds=0x3e8) [0196.701] Sleep (dwMilliseconds=0x3e8) [0196.703] Sleep (dwMilliseconds=0x3e8) [0196.705] Sleep (dwMilliseconds=0x3e8) [0196.707] Sleep (dwMilliseconds=0x3e8) [0196.711] Sleep (dwMilliseconds=0x3e8) [0196.712] Sleep (dwMilliseconds=0x3e8) [0196.714] Sleep (dwMilliseconds=0x3e8) [0196.715] Sleep (dwMilliseconds=0x3e8) [0196.717] Sleep (dwMilliseconds=0x3e8) [0196.719] Sleep (dwMilliseconds=0x3e8) [0196.721] Sleep (dwMilliseconds=0x3e8) [0196.723] Sleep (dwMilliseconds=0x3e8) [0196.725] Sleep (dwMilliseconds=0x3e8) [0196.727] Sleep (dwMilliseconds=0x3e8) [0196.729] Sleep (dwMilliseconds=0x3e8) [0196.731] Sleep (dwMilliseconds=0x3e8) [0196.732] Sleep (dwMilliseconds=0x3e8) [0196.734] Sleep (dwMilliseconds=0x3e8) [0196.736] Sleep (dwMilliseconds=0x3e8) [0196.738] Sleep (dwMilliseconds=0x3e8) [0196.740] Sleep (dwMilliseconds=0x3e8) [0196.743] Sleep (dwMilliseconds=0x3e8) [0196.745] Sleep (dwMilliseconds=0x3e8) [0196.747] Sleep (dwMilliseconds=0x3e8) [0196.749] Sleep (dwMilliseconds=0x3e8) [0196.751] Sleep (dwMilliseconds=0x3e8) [0196.753] Sleep (dwMilliseconds=0x3e8) [0196.755] Sleep (dwMilliseconds=0x3e8) [0196.757] Sleep (dwMilliseconds=0x3e8) [0196.759] Sleep (dwMilliseconds=0x3e8) [0196.763] Sleep (dwMilliseconds=0x3e8) [0196.765] Sleep (dwMilliseconds=0x3e8) [0196.769] Sleep (dwMilliseconds=0x3e8) [0196.771] Sleep (dwMilliseconds=0x3e8) [0196.773] Sleep (dwMilliseconds=0x3e8) [0196.775] Sleep (dwMilliseconds=0x3e8) [0196.777] Sleep (dwMilliseconds=0x3e8) [0196.779] Sleep (dwMilliseconds=0x3e8) [0196.781] Sleep (dwMilliseconds=0x3e8) [0196.783] Sleep (dwMilliseconds=0x3e8) [0196.785] Sleep (dwMilliseconds=0x3e8) [0196.787] Sleep (dwMilliseconds=0x3e8) [0196.789] Sleep (dwMilliseconds=0x3e8) [0196.791] Sleep (dwMilliseconds=0x3e8) [0196.793] Sleep (dwMilliseconds=0x3e8) [0196.795] Sleep (dwMilliseconds=0x3e8) [0196.798] Sleep (dwMilliseconds=0x3e8) [0196.800] Sleep (dwMilliseconds=0x3e8) [0196.802] Sleep (dwMilliseconds=0x3e8) [0196.804] Sleep (dwMilliseconds=0x3e8) [0196.806] Sleep (dwMilliseconds=0x3e8) [0196.808] Sleep (dwMilliseconds=0x3e8) [0196.810] Sleep (dwMilliseconds=0x3e8) [0196.812] Sleep (dwMilliseconds=0x3e8) [0196.814] Sleep (dwMilliseconds=0x3e8) [0196.816] Sleep (dwMilliseconds=0x3e8) [0196.818] Sleep (dwMilliseconds=0x3e8) [0196.820] Sleep (dwMilliseconds=0x3e8) [0196.822] Sleep (dwMilliseconds=0x3e8) [0196.824] Sleep (dwMilliseconds=0x3e8) [0196.826] Sleep (dwMilliseconds=0x3e8) [0196.828] Sleep (dwMilliseconds=0x3e8) [0196.830] Sleep (dwMilliseconds=0x3e8) [0196.832] Sleep (dwMilliseconds=0x3e8) [0196.834] Sleep (dwMilliseconds=0x3e8) [0196.836] Sleep (dwMilliseconds=0x3e8) [0196.838] Sleep (dwMilliseconds=0x3e8) [0196.840] Sleep (dwMilliseconds=0x3e8) [0196.842] Sleep (dwMilliseconds=0x3e8) [0196.844] Sleep (dwMilliseconds=0x3e8) [0196.846] Sleep (dwMilliseconds=0x3e8) [0196.858] Sleep (dwMilliseconds=0x3e8) [0196.860] Sleep (dwMilliseconds=0x3e8) [0196.862] Sleep (dwMilliseconds=0x3e8) [0196.864] Sleep (dwMilliseconds=0x3e8) [0196.866] Sleep (dwMilliseconds=0x3e8) [0196.868] Sleep (dwMilliseconds=0x3e8) [0196.870] Sleep (dwMilliseconds=0x3e8) [0196.874] Sleep (dwMilliseconds=0x3e8) [0196.876] Sleep (dwMilliseconds=0x3e8) [0196.878] Sleep (dwMilliseconds=0x3e8) [0196.880] Sleep (dwMilliseconds=0x3e8) [0196.882] Sleep (dwMilliseconds=0x3e8) [0196.884] Sleep (dwMilliseconds=0x3e8) [0196.886] Sleep (dwMilliseconds=0x3e8) [0196.889] Sleep (dwMilliseconds=0x3e8) [0196.890] Sleep (dwMilliseconds=0x3e8) [0196.892] Sleep (dwMilliseconds=0x3e8) [0196.894] Sleep (dwMilliseconds=0x3e8) [0196.896] Sleep (dwMilliseconds=0x3e8) [0196.898] Sleep (dwMilliseconds=0x3e8) [0196.900] Sleep (dwMilliseconds=0x3e8) [0196.902] Sleep (dwMilliseconds=0x3e8) [0196.904] Sleep (dwMilliseconds=0x3e8) [0196.906] Sleep (dwMilliseconds=0x3e8) [0196.908] Sleep (dwMilliseconds=0x3e8) [0196.910] Sleep (dwMilliseconds=0x3e8) [0196.913] Sleep (dwMilliseconds=0x3e8) [0196.914] Sleep (dwMilliseconds=0x3e8) [0196.916] Sleep (dwMilliseconds=0x3e8) [0196.917] Sleep (dwMilliseconds=0x3e8) [0196.919] Sleep (dwMilliseconds=0x3e8) [0196.921] Sleep (dwMilliseconds=0x3e8) [0196.923] Sleep (dwMilliseconds=0x3e8) [0196.925] Sleep (dwMilliseconds=0x3e8) [0196.927] Sleep (dwMilliseconds=0x3e8) [0196.939] Sleep (dwMilliseconds=0x3e8) [0196.941] Sleep (dwMilliseconds=0x3e8) [0196.943] Sleep (dwMilliseconds=0x3e8) [0196.945] Sleep (dwMilliseconds=0x3e8) [0196.947] Sleep (dwMilliseconds=0x3e8) [0196.949] Sleep (dwMilliseconds=0x3e8) [0196.951] Sleep (dwMilliseconds=0x3e8) [0196.953] Sleep (dwMilliseconds=0x3e8) [0196.955] Sleep (dwMilliseconds=0x3e8) [0196.957] Sleep (dwMilliseconds=0x3e8) [0196.959] Sleep (dwMilliseconds=0x3e8) [0196.961] Sleep (dwMilliseconds=0x3e8) [0196.962] Sleep (dwMilliseconds=0x3e8) [0196.964] Sleep (dwMilliseconds=0x3e8) [0196.966] Sleep (dwMilliseconds=0x3e8) [0196.968] Sleep (dwMilliseconds=0x3e8) [0196.970] Sleep (dwMilliseconds=0x3e8) [0196.972] Sleep (dwMilliseconds=0x3e8) [0196.974] Sleep (dwMilliseconds=0x3e8) [0196.976] Sleep (dwMilliseconds=0x3e8) [0196.978] Sleep (dwMilliseconds=0x3e8) [0196.980] Sleep (dwMilliseconds=0x3e8) [0196.982] Sleep (dwMilliseconds=0x3e8) [0196.984] Sleep (dwMilliseconds=0x3e8) [0196.987] Sleep (dwMilliseconds=0x3e8) [0196.988] Sleep (dwMilliseconds=0x3e8) [0196.990] Sleep (dwMilliseconds=0x3e8) [0196.992] Sleep (dwMilliseconds=0x3e8) [0196.994] Sleep (dwMilliseconds=0x3e8) [0196.998] Sleep (dwMilliseconds=0x3e8) [0197.000] Sleep (dwMilliseconds=0x3e8) [0197.004] Sleep (dwMilliseconds=0x3e8) [0197.005] Sleep (dwMilliseconds=0x3e8) [0197.007] Sleep (dwMilliseconds=0x3e8) [0197.009] Sleep (dwMilliseconds=0x3e8) [0197.012] Sleep (dwMilliseconds=0x3e8) [0197.013] Sleep (dwMilliseconds=0x3e8) [0197.030] Sleep (dwMilliseconds=0x3e8) [0197.032] Sleep (dwMilliseconds=0x3e8) [0197.034] Sleep (dwMilliseconds=0x3e8) [0197.036] Sleep (dwMilliseconds=0x3e8) [0197.038] Sleep (dwMilliseconds=0x3e8) [0197.039] Sleep (dwMilliseconds=0x3e8) [0197.041] Sleep (dwMilliseconds=0x3e8) [0197.043] Sleep (dwMilliseconds=0x3e8) [0197.045] Sleep (dwMilliseconds=0x3e8) [0197.047] Sleep (dwMilliseconds=0x3e8) [0197.050] Sleep (dwMilliseconds=0x3e8) [0197.051] Sleep (dwMilliseconds=0x3e8) [0197.053] Sleep (dwMilliseconds=0x3e8) [0197.055] Sleep (dwMilliseconds=0x3e8) [0197.057] Sleep (dwMilliseconds=0x3e8) [0197.060] Sleep (dwMilliseconds=0x3e8) [0197.063] Sleep (dwMilliseconds=0x3e8) [0197.065] Sleep (dwMilliseconds=0x3e8) [0197.067] Sleep (dwMilliseconds=0x3e8) [0197.069] Sleep (dwMilliseconds=0x3e8) [0197.071] Sleep (dwMilliseconds=0x3e8) [0197.073] Sleep (dwMilliseconds=0x3e8) [0197.075] Sleep (dwMilliseconds=0x3e8) [0197.078] Sleep (dwMilliseconds=0x3e8) [0197.080] Sleep (dwMilliseconds=0x3e8) [0197.082] Sleep (dwMilliseconds=0x3e8) [0197.088] Sleep (dwMilliseconds=0x3e8) [0197.093] Sleep (dwMilliseconds=0x3e8) [0197.095] Sleep (dwMilliseconds=0x3e8) [0197.097] Sleep (dwMilliseconds=0x3e8) [0197.099] Sleep (dwMilliseconds=0x3e8) [0197.101] Sleep (dwMilliseconds=0x3e8) [0197.103] Sleep (dwMilliseconds=0x3e8) [0197.105] Sleep (dwMilliseconds=0x3e8) [0197.107] Sleep (dwMilliseconds=0x3e8) [0197.109] Sleep (dwMilliseconds=0x3e8) [0197.111] Sleep (dwMilliseconds=0x3e8) [0197.113] Sleep (dwMilliseconds=0x3e8) [0197.114] Sleep (dwMilliseconds=0x3e8) [0197.119] Sleep (dwMilliseconds=0x3e8) [0197.125] Sleep (dwMilliseconds=0x3e8) [0197.138] Sleep (dwMilliseconds=0x3e8) [0197.139] Sleep (dwMilliseconds=0x3e8) [0197.141] Sleep (dwMilliseconds=0x3e8) [0197.143] Sleep (dwMilliseconds=0x3e8) [0197.146] Sleep (dwMilliseconds=0x3e8) [0197.148] Sleep (dwMilliseconds=0x3e8) [0197.150] Sleep (dwMilliseconds=0x3e8) [0197.163] Sleep (dwMilliseconds=0x3e8) [0197.164] Sleep (dwMilliseconds=0x3e8) [0197.166] Sleep (dwMilliseconds=0x3e8) [0197.168] Sleep (dwMilliseconds=0x3e8) [0197.170] Sleep (dwMilliseconds=0x3e8) [0197.172] Sleep (dwMilliseconds=0x3e8) [0197.174] Sleep (dwMilliseconds=0x3e8) [0197.176] Sleep (dwMilliseconds=0x3e8) [0197.178] Sleep (dwMilliseconds=0x3e8) [0197.180] Sleep (dwMilliseconds=0x3e8) [0197.182] Sleep (dwMilliseconds=0x3e8) [0197.185] Sleep (dwMilliseconds=0x3e8) [0197.187] Sleep (dwMilliseconds=0x3e8) [0197.189] Sleep (dwMilliseconds=0x3e8) [0197.191] Sleep (dwMilliseconds=0x3e8) [0197.199] Sleep (dwMilliseconds=0x3e8) [0197.203] Sleep (dwMilliseconds=0x3e8) [0197.205] Sleep (dwMilliseconds=0x3e8) [0197.207] Sleep (dwMilliseconds=0x3e8) [0197.209] Sleep (dwMilliseconds=0x3e8) [0197.211] Sleep (dwMilliseconds=0x3e8) [0197.213] Sleep (dwMilliseconds=0x3e8) [0197.215] Sleep (dwMilliseconds=0x3e8) [0197.217] Sleep (dwMilliseconds=0x3e8) [0197.220] Sleep (dwMilliseconds=0x3e8) [0197.223] Sleep (dwMilliseconds=0x3e8) [0197.225] Sleep (dwMilliseconds=0x3e8) [0197.227] Sleep (dwMilliseconds=0x3e8) [0197.229] Sleep (dwMilliseconds=0x3e8) [0197.231] Sleep (dwMilliseconds=0x3e8) [0197.233] Sleep (dwMilliseconds=0x3e8) [0197.235] Sleep (dwMilliseconds=0x3e8) [0197.237] Sleep (dwMilliseconds=0x3e8) [0197.239] Sleep (dwMilliseconds=0x3e8) [0197.241] Sleep (dwMilliseconds=0x3e8) [0197.243] Sleep (dwMilliseconds=0x3e8) [0197.244] Sleep (dwMilliseconds=0x3e8) [0197.246] Sleep (dwMilliseconds=0x3e8) [0197.248] Sleep (dwMilliseconds=0x3e8) [0197.252] Sleep (dwMilliseconds=0x3e8) [0197.253] Sleep (dwMilliseconds=0x3e8) [0197.255] Sleep (dwMilliseconds=0x3e8) [0197.257] Sleep (dwMilliseconds=0x3e8) [0197.266] Sleep (dwMilliseconds=0x3e8) [0197.268] Sleep (dwMilliseconds=0x3e8) [0197.270] Sleep (dwMilliseconds=0x3e8) [0197.272] Sleep (dwMilliseconds=0x3e8) [0197.274] Sleep (dwMilliseconds=0x3e8) [0197.276] Sleep (dwMilliseconds=0x3e8) [0197.278] Sleep (dwMilliseconds=0x3e8) [0197.280] Sleep (dwMilliseconds=0x3e8) [0197.282] Sleep (dwMilliseconds=0x3e8) [0197.284] Sleep (dwMilliseconds=0x3e8) [0197.286] Sleep (dwMilliseconds=0x3e8) [0197.288] Sleep (dwMilliseconds=0x3e8) [0197.290] Sleep (dwMilliseconds=0x3e8) [0197.292] Sleep (dwMilliseconds=0x3e8) [0197.294] Sleep (dwMilliseconds=0x3e8) [0197.296] Sleep (dwMilliseconds=0x3e8) [0197.298] Sleep (dwMilliseconds=0x3e8) [0197.300] Sleep (dwMilliseconds=0x3e8) [0197.302] Sleep (dwMilliseconds=0x3e8) [0197.306] Sleep (dwMilliseconds=0x3e8) [0197.321] Sleep (dwMilliseconds=0x3e8) [0197.323] Sleep (dwMilliseconds=0x3e8) [0197.325] Sleep (dwMilliseconds=0x3e8) [0197.327] Sleep (dwMilliseconds=0x3e8) [0197.329] Sleep (dwMilliseconds=0x3e8) [0197.331] Sleep (dwMilliseconds=0x3e8) [0197.333] Sleep (dwMilliseconds=0x3e8) [0197.335] Sleep (dwMilliseconds=0x3e8) [0197.337] Sleep (dwMilliseconds=0x3e8) [0197.339] Sleep (dwMilliseconds=0x3e8) [0197.341] Sleep (dwMilliseconds=0x3e8) [0197.343] Sleep (dwMilliseconds=0x3e8) [0197.345] Sleep (dwMilliseconds=0x3e8) [0197.347] Sleep (dwMilliseconds=0x3e8) [0197.349] Sleep (dwMilliseconds=0x3e8) [0197.351] Sleep (dwMilliseconds=0x3e8) [0197.353] Sleep (dwMilliseconds=0x3e8) [0197.358] Sleep (dwMilliseconds=0x3e8) [0197.360] Sleep (dwMilliseconds=0x3e8) [0197.362] Sleep (dwMilliseconds=0x3e8) [0197.364] Sleep (dwMilliseconds=0x3e8) [0197.366] Sleep (dwMilliseconds=0x3e8) [0197.368] Sleep (dwMilliseconds=0x3e8) [0197.371] Sleep (dwMilliseconds=0x3e8) [0197.372] Sleep (dwMilliseconds=0x3e8) [0197.374] Sleep (dwMilliseconds=0x3e8) [0197.376] Sleep (dwMilliseconds=0x3e8) [0197.378] Sleep (dwMilliseconds=0x3e8) [0197.380] Sleep (dwMilliseconds=0x3e8) [0197.382] Sleep (dwMilliseconds=0x3e8) [0197.384] Sleep (dwMilliseconds=0x3e8) [0197.386] Sleep (dwMilliseconds=0x3e8) [0197.388] Sleep (dwMilliseconds=0x3e8) [0197.390] Sleep (dwMilliseconds=0x3e8) [0197.395] Sleep (dwMilliseconds=0x3e8) [0197.397] Sleep (dwMilliseconds=0x3e8) [0197.399] Sleep (dwMilliseconds=0x3e8) [0197.409] Sleep (dwMilliseconds=0x3e8) [0197.410] Sleep (dwMilliseconds=0x3e8) [0197.412] Sleep (dwMilliseconds=0x3e8) [0197.417] Sleep (dwMilliseconds=0x3e8) [0197.419] Sleep (dwMilliseconds=0x3e8) [0197.422] Sleep (dwMilliseconds=0x3e8) [0197.423] Sleep (dwMilliseconds=0x3e8) [0197.425] Sleep (dwMilliseconds=0x3e8) [0197.427] Sleep (dwMilliseconds=0x3e8) [0197.429] Sleep (dwMilliseconds=0x3e8) [0197.431] Sleep (dwMilliseconds=0x3e8) [0197.435] Sleep (dwMilliseconds=0x3e8) [0197.436] Sleep (dwMilliseconds=0x3e8) [0197.438] Sleep (dwMilliseconds=0x3e8) [0197.440] Sleep (dwMilliseconds=0x3e8) [0197.442] Sleep (dwMilliseconds=0x3e8) [0197.444] Sleep (dwMilliseconds=0x3e8) [0197.446] Sleep (dwMilliseconds=0x3e8) [0197.448] Sleep (dwMilliseconds=0x3e8) [0197.450] Sleep (dwMilliseconds=0x3e8) [0197.454] Sleep (dwMilliseconds=0x3e8) [0197.455] Sleep (dwMilliseconds=0x3e8) [0197.457] Sleep (dwMilliseconds=0x3e8) [0197.459] Sleep (dwMilliseconds=0x3e8) [0197.461] Sleep (dwMilliseconds=0x3e8) [0197.463] Sleep (dwMilliseconds=0x3e8) [0197.465] Sleep (dwMilliseconds=0x3e8) [0197.469] Sleep (dwMilliseconds=0x3e8) [0197.471] Sleep (dwMilliseconds=0x3e8) [0197.473] Sleep (dwMilliseconds=0x3e8) [0197.478] Sleep (dwMilliseconds=0x3e8) [0197.480] Sleep (dwMilliseconds=0x3e8) [0197.482] Sleep (dwMilliseconds=0x3e8) [0197.484] Sleep (dwMilliseconds=0x3e8) [0197.486] Sleep (dwMilliseconds=0x3e8) [0197.488] Sleep (dwMilliseconds=0x3e8) [0197.490] Sleep (dwMilliseconds=0x3e8) [0197.492] Sleep (dwMilliseconds=0x3e8) [0197.494] Sleep (dwMilliseconds=0x3e8) [0197.496] Sleep (dwMilliseconds=0x3e8) [0197.498] Sleep (dwMilliseconds=0x3e8) [0197.502] Sleep (dwMilliseconds=0x3e8) [0197.504] Sleep (dwMilliseconds=0x3e8) [0197.506] Sleep (dwMilliseconds=0x3e8) [0197.508] Sleep (dwMilliseconds=0x3e8) [0197.510] Sleep (dwMilliseconds=0x3e8) [0197.513] Sleep (dwMilliseconds=0x3e8) [0197.514] Sleep (dwMilliseconds=0x3e8) [0197.531] Sleep (dwMilliseconds=0x3e8) [0197.532] Sleep (dwMilliseconds=0x3e8) [0197.534] Sleep (dwMilliseconds=0x3e8) [0197.536] Sleep (dwMilliseconds=0x3e8) [0197.538] Sleep (dwMilliseconds=0x3e8) [0197.540] Sleep (dwMilliseconds=0x3e8) [0197.542] Sleep (dwMilliseconds=0x3e8) [0197.544] Sleep (dwMilliseconds=0x3e8) [0197.546] Sleep (dwMilliseconds=0x3e8) [0197.550] Sleep (dwMilliseconds=0x3e8) [0197.552] Sleep (dwMilliseconds=0x3e8) [0197.554] Sleep (dwMilliseconds=0x3e8) [0197.556] Sleep (dwMilliseconds=0x3e8) [0197.560] Sleep (dwMilliseconds=0x3e8) [0197.562] Sleep (dwMilliseconds=0x3e8) [0197.565] Sleep (dwMilliseconds=0x3e8) [0197.569] Sleep (dwMilliseconds=0x3e8) [0197.571] Sleep (dwMilliseconds=0x3e8) [0197.573] Sleep (dwMilliseconds=0x3e8) [0197.575] Sleep (dwMilliseconds=0x3e8) [0197.577] Sleep (dwMilliseconds=0x3e8) [0197.579] Sleep (dwMilliseconds=0x3e8) [0197.581] Sleep (dwMilliseconds=0x3e8) [0197.583] Sleep (dwMilliseconds=0x3e8) [0197.585] Sleep (dwMilliseconds=0x3e8) [0197.587] Sleep (dwMilliseconds=0x3e8) [0197.596] Sleep (dwMilliseconds=0x3e8) [0197.598] Sleep (dwMilliseconds=0x3e8) [0197.601] Sleep (dwMilliseconds=0x3e8) [0197.603] Sleep (dwMilliseconds=0x3e8) [0197.605] Sleep (dwMilliseconds=0x3e8) [0197.607] Sleep (dwMilliseconds=0x3e8) [0197.609] Sleep (dwMilliseconds=0x3e8) [0197.611] Sleep (dwMilliseconds=0x3e8) [0197.617] Sleep (dwMilliseconds=0x3e8) [0197.619] Sleep (dwMilliseconds=0x3e8) [0197.621] Sleep (dwMilliseconds=0x3e8) [0197.623] Sleep (dwMilliseconds=0x3e8) [0197.625] Sleep (dwMilliseconds=0x3e8) [0197.642] Sleep (dwMilliseconds=0x3e8) [0197.644] Sleep (dwMilliseconds=0x3e8) [0197.658] Sleep (dwMilliseconds=0x3e8) [0197.660] Sleep (dwMilliseconds=0x3e8) [0197.662] Sleep (dwMilliseconds=0x3e8) [0197.664] Sleep (dwMilliseconds=0x3e8) [0197.666] Sleep (dwMilliseconds=0x3e8) [0197.668] Sleep (dwMilliseconds=0x3e8) [0197.670] Sleep (dwMilliseconds=0x3e8) [0197.672] Sleep (dwMilliseconds=0x3e8) [0197.674] Sleep (dwMilliseconds=0x3e8) [0197.676] Sleep (dwMilliseconds=0x3e8) [0197.678] Sleep (dwMilliseconds=0x3e8) [0197.680] Sleep (dwMilliseconds=0x3e8) [0197.682] Sleep (dwMilliseconds=0x3e8) [0197.684] Sleep (dwMilliseconds=0x3e8) [0197.686] Sleep (dwMilliseconds=0x3e8) [0197.688] Sleep (dwMilliseconds=0x3e8) [0197.690] Sleep (dwMilliseconds=0x3e8) [0197.692] Sleep (dwMilliseconds=0x3e8) [0197.694] Sleep (dwMilliseconds=0x3e8) [0197.696] Sleep (dwMilliseconds=0x3e8) [0197.698] Sleep (dwMilliseconds=0x3e8) [0197.700] Sleep (dwMilliseconds=0x3e8) [0197.702] Sleep (dwMilliseconds=0x3e8) [0197.704] Sleep (dwMilliseconds=0x3e8) [0197.706] Sleep (dwMilliseconds=0x3e8) [0197.708] Sleep (dwMilliseconds=0x3e8) [0197.710] Sleep (dwMilliseconds=0x3e8) [0197.714] Sleep (dwMilliseconds=0x3e8) [0197.715] Sleep (dwMilliseconds=0x3e8) [0197.717] Sleep (dwMilliseconds=0x3e8) [0197.724] Sleep (dwMilliseconds=0x3e8) [0197.726] Sleep (dwMilliseconds=0x3e8) [0197.728] Sleep (dwMilliseconds=0x3e8) [0197.732] Sleep (dwMilliseconds=0x3e8) [0197.734] Sleep (dwMilliseconds=0x3e8) [0197.736] Sleep (dwMilliseconds=0x3e8) [0197.740] Sleep (dwMilliseconds=0x3e8) [0197.742] Sleep (dwMilliseconds=0x3e8) [0197.748] Sleep (dwMilliseconds=0x3e8) [0197.750] Sleep (dwMilliseconds=0x3e8) [0197.752] Sleep (dwMilliseconds=0x3e8) [0197.755] Sleep (dwMilliseconds=0x3e8) [0197.757] Sleep (dwMilliseconds=0x3e8) [0197.759] Sleep (dwMilliseconds=0x3e8) [0197.761] Sleep (dwMilliseconds=0x3e8) [0197.763] Sleep (dwMilliseconds=0x3e8) [0197.765] Sleep (dwMilliseconds=0x3e8) [0197.767] Sleep (dwMilliseconds=0x3e8) [0197.770] Sleep (dwMilliseconds=0x3e8) [0197.771] Sleep (dwMilliseconds=0x3e8) [0197.773] Sleep (dwMilliseconds=0x3e8) [0197.775] Sleep (dwMilliseconds=0x3e8) [0197.777] Sleep (dwMilliseconds=0x3e8) [0197.779] Sleep (dwMilliseconds=0x3e8) [0197.780] Sleep (dwMilliseconds=0x3e8) [0197.782] Sleep (dwMilliseconds=0x3e8) [0197.784] Sleep (dwMilliseconds=0x3e8) [0197.786] Sleep (dwMilliseconds=0x3e8) [0197.788] Sleep (dwMilliseconds=0x3e8) [0197.789] Sleep (dwMilliseconds=0x3e8) [0197.791] Sleep (dwMilliseconds=0x3e8) [0197.793] Sleep (dwMilliseconds=0x3e8) [0197.795] Sleep (dwMilliseconds=0x3e8) [0197.797] Sleep (dwMilliseconds=0x3e8) [0197.799] Sleep (dwMilliseconds=0x3e8) [0197.800] Sleep (dwMilliseconds=0x3e8) [0197.802] Sleep (dwMilliseconds=0x3e8) [0197.804] Sleep (dwMilliseconds=0x3e8) [0197.806] Sleep (dwMilliseconds=0x3e8) [0197.808] Sleep (dwMilliseconds=0x3e8) [0197.810] Sleep (dwMilliseconds=0x3e8) [0197.812] Sleep (dwMilliseconds=0x3e8) [0197.814] Sleep (dwMilliseconds=0x3e8) [0197.816] Sleep (dwMilliseconds=0x3e8) [0197.817] Sleep (dwMilliseconds=0x3e8) [0197.820] Sleep (dwMilliseconds=0x3e8) [0197.822] Sleep (dwMilliseconds=0x3e8) [0197.824] Sleep (dwMilliseconds=0x3e8) [0197.826] Sleep (dwMilliseconds=0x3e8) [0197.828] Sleep (dwMilliseconds=0x3e8) [0197.830] Sleep (dwMilliseconds=0x3e8) [0197.832] Sleep (dwMilliseconds=0x3e8) [0197.833] Sleep (dwMilliseconds=0x3e8) [0197.836] Sleep (dwMilliseconds=0x3e8) [0197.838] Sleep (dwMilliseconds=0x3e8) [0197.840] Sleep (dwMilliseconds=0x3e8) [0197.842] Sleep (dwMilliseconds=0x3e8) [0197.844] Sleep (dwMilliseconds=0x3e8) [0197.846] Sleep (dwMilliseconds=0x3e8) [0197.869] Sleep (dwMilliseconds=0x3e8) [0197.870] Sleep (dwMilliseconds=0x3e8) [0197.872] Sleep (dwMilliseconds=0x3e8) [0197.875] Sleep (dwMilliseconds=0x3e8) [0197.879] Sleep (dwMilliseconds=0x3e8) [0197.881] Sleep (dwMilliseconds=0x3e8) [0197.883] Sleep (dwMilliseconds=0x3e8) [0197.885] Sleep (dwMilliseconds=0x3e8) [0197.887] Sleep (dwMilliseconds=0x3e8) [0197.889] Sleep (dwMilliseconds=0x3e8) [0197.894] Sleep (dwMilliseconds=0x3e8) [0197.896] Sleep (dwMilliseconds=0x3e8) [0197.897] Sleep (dwMilliseconds=0x3e8) [0197.900] Sleep (dwMilliseconds=0x3e8) [0197.902] Sleep (dwMilliseconds=0x3e8) [0197.904] Sleep (dwMilliseconds=0x3e8) [0197.906] Sleep (dwMilliseconds=0x3e8) [0197.908] Sleep (dwMilliseconds=0x3e8) [0197.910] Sleep (dwMilliseconds=0x3e8) [0197.912] Sleep (dwMilliseconds=0x3e8) [0197.914] Sleep (dwMilliseconds=0x3e8) [0197.918] Sleep (dwMilliseconds=0x3e8) [0197.920] Sleep (dwMilliseconds=0x3e8) [0197.922] Sleep (dwMilliseconds=0x3e8) [0197.924] Sleep (dwMilliseconds=0x3e8) [0197.926] Sleep (dwMilliseconds=0x3e8) [0197.932] Sleep (dwMilliseconds=0x3e8) [0197.933] Sleep (dwMilliseconds=0x3e8) [0197.935] Sleep (dwMilliseconds=0x3e8) [0197.937] Sleep (dwMilliseconds=0x3e8) [0197.953] Sleep (dwMilliseconds=0x3e8) [0197.956] Sleep (dwMilliseconds=0x3e8) [0197.957] Sleep (dwMilliseconds=0x3e8) [0197.960] Sleep (dwMilliseconds=0x3e8) [0197.963] Sleep (dwMilliseconds=0x3e8) [0197.965] Sleep (dwMilliseconds=0x3e8) [0197.969] Sleep (dwMilliseconds=0x3e8) [0197.971] Sleep (dwMilliseconds=0x3e8) [0197.973] Sleep (dwMilliseconds=0x3e8) [0197.977] Sleep (dwMilliseconds=0x3e8) [0197.979] Sleep (dwMilliseconds=0x3e8) [0197.981] Sleep (dwMilliseconds=0x3e8) [0197.983] Sleep (dwMilliseconds=0x3e8) [0197.986] Sleep (dwMilliseconds=0x3e8) [0197.988] Sleep (dwMilliseconds=0x3e8) [0197.990] Sleep (dwMilliseconds=0x3e8) [0197.992] Sleep (dwMilliseconds=0x3e8) [0197.994] Sleep (dwMilliseconds=0x3e8) [0197.996] Sleep (dwMilliseconds=0x3e8) [0197.998] Sleep (dwMilliseconds=0x3e8) [0198.002] Sleep (dwMilliseconds=0x3e8) [0198.003] Sleep (dwMilliseconds=0x3e8) [0198.006] Sleep (dwMilliseconds=0x3e8) [0198.007] Sleep (dwMilliseconds=0x3e8) [0198.010] Sleep (dwMilliseconds=0x3e8) [0198.026] Sleep (dwMilliseconds=0x3e8) [0198.028] Sleep (dwMilliseconds=0x3e8) [0198.030] Sleep (dwMilliseconds=0x3e8) [0198.035] Sleep (dwMilliseconds=0x3e8) [0198.037] Sleep (dwMilliseconds=0x3e8) [0198.039] Sleep (dwMilliseconds=0x3e8) [0198.041] Sleep (dwMilliseconds=0x3e8) [0198.043] Sleep (dwMilliseconds=0x3e8) [0198.046] Sleep (dwMilliseconds=0x3e8) [0198.049] Sleep (dwMilliseconds=0x3e8) [0198.051] Sleep (dwMilliseconds=0x3e8) [0198.053] Sleep (dwMilliseconds=0x3e8) [0198.055] Sleep (dwMilliseconds=0x3e8) [0198.057] Sleep (dwMilliseconds=0x3e8) [0198.059] Sleep (dwMilliseconds=0x3e8) [0198.061] Sleep (dwMilliseconds=0x3e8) [0198.064] Sleep (dwMilliseconds=0x3e8) [0198.066] Sleep (dwMilliseconds=0x3e8) [0198.068] Sleep (dwMilliseconds=0x3e8) [0198.072] Sleep (dwMilliseconds=0x3e8) [0198.074] Sleep (dwMilliseconds=0x3e8) [0198.076] Sleep (dwMilliseconds=0x3e8) [0198.078] Sleep (dwMilliseconds=0x3e8) [0198.080] Sleep (dwMilliseconds=0x3e8) [0198.084] Sleep (dwMilliseconds=0x3e8) [0198.086] Sleep (dwMilliseconds=0x3e8) [0198.088] Sleep (dwMilliseconds=0x3e8) [0198.090] Sleep (dwMilliseconds=0x3e8) [0198.092] Sleep (dwMilliseconds=0x3e8) [0198.094] Sleep (dwMilliseconds=0x3e8) [0198.096] Sleep (dwMilliseconds=0x3e8) [0198.098] Sleep (dwMilliseconds=0x3e8) [0198.101] Sleep (dwMilliseconds=0x3e8) [0198.102] Sleep (dwMilliseconds=0x3e8) [0198.104] Sleep (dwMilliseconds=0x3e8) [0198.106] Sleep (dwMilliseconds=0x3e8) [0198.108] Sleep (dwMilliseconds=0x3e8) [0198.110] Sleep (dwMilliseconds=0x3e8) [0198.112] Sleep (dwMilliseconds=0x3e8) [0198.114] Sleep (dwMilliseconds=0x3e8) [0198.119] Sleep (dwMilliseconds=0x3e8) [0198.121] Sleep (dwMilliseconds=0x3e8) [0198.123] Sleep (dwMilliseconds=0x3e8) [0198.125] Sleep (dwMilliseconds=0x3e8) [0198.127] Sleep (dwMilliseconds=0x3e8) [0198.131] Sleep (dwMilliseconds=0x3e8) [0198.132] Sleep (dwMilliseconds=0x3e8) [0198.134] Sleep (dwMilliseconds=0x3e8) [0198.136] Sleep (dwMilliseconds=0x3e8) [0198.138] Sleep (dwMilliseconds=0x3e8) [0198.140] Sleep (dwMilliseconds=0x3e8) [0198.142] Sleep (dwMilliseconds=0x3e8) [0198.144] Sleep (dwMilliseconds=0x3e8) [0198.146] Sleep (dwMilliseconds=0x3e8) [0198.148] Sleep (dwMilliseconds=0x3e8) [0198.150] Sleep (dwMilliseconds=0x3e8) [0198.152] Sleep (dwMilliseconds=0x3e8) [0198.154] Sleep (dwMilliseconds=0x3e8) [0198.156] Sleep (dwMilliseconds=0x3e8) [0198.158] Sleep (dwMilliseconds=0x3e8) [0198.161] Sleep (dwMilliseconds=0x3e8) [0198.164] Sleep (dwMilliseconds=0x3e8) [0198.165] Sleep (dwMilliseconds=0x3e8) [0198.167] Sleep (dwMilliseconds=0x3e8) [0198.169] Sleep (dwMilliseconds=0x3e8) [0198.171] Sleep (dwMilliseconds=0x3e8) [0198.173] Sleep (dwMilliseconds=0x3e8) [0198.175] Sleep (dwMilliseconds=0x3e8) [0198.177] Sleep (dwMilliseconds=0x3e8) [0198.179] Sleep (dwMilliseconds=0x3e8) [0198.181] Sleep (dwMilliseconds=0x3e8) [0198.183] Sleep (dwMilliseconds=0x3e8) [0198.185] Sleep (dwMilliseconds=0x3e8) [0198.187] Sleep (dwMilliseconds=0x3e8) [0198.189] Sleep (dwMilliseconds=0x3e8) [0198.191] Sleep (dwMilliseconds=0x3e8) [0198.193] Sleep (dwMilliseconds=0x3e8) [0198.195] Sleep (dwMilliseconds=0x3e8) [0198.197] Sleep (dwMilliseconds=0x3e8) [0198.199] Sleep (dwMilliseconds=0x3e8) [0198.201] Sleep (dwMilliseconds=0x3e8) [0198.203] Sleep (dwMilliseconds=0x3e8) [0198.205] Sleep (dwMilliseconds=0x3e8) [0198.223] Sleep (dwMilliseconds=0x3e8) [0198.229] Sleep (dwMilliseconds=0x3e8) [0198.232] Sleep (dwMilliseconds=0x3e8) [0198.235] Sleep (dwMilliseconds=0x3e8) [0198.237] Sleep (dwMilliseconds=0x3e8) [0198.239] Sleep (dwMilliseconds=0x3e8) [0198.241] Sleep (dwMilliseconds=0x3e8) [0198.243] Sleep (dwMilliseconds=0x3e8) [0198.245] Sleep (dwMilliseconds=0x3e8) [0198.247] Sleep (dwMilliseconds=0x3e8) [0198.249] Sleep (dwMilliseconds=0x3e8) [0198.251] Sleep (dwMilliseconds=0x3e8) [0198.257] Sleep (dwMilliseconds=0x3e8) [0198.262] Sleep (dwMilliseconds=0x3e8) [0198.264] Sleep (dwMilliseconds=0x3e8) [0198.266] Sleep (dwMilliseconds=0x3e8) [0198.268] Sleep (dwMilliseconds=0x3e8) [0198.271] Sleep (dwMilliseconds=0x3e8) [0198.273] Sleep (dwMilliseconds=0x3e8) [0198.275] Sleep (dwMilliseconds=0x3e8) [0198.277] Sleep (dwMilliseconds=0x3e8) [0198.284] Sleep (dwMilliseconds=0x3e8) [0198.286] Sleep (dwMilliseconds=0x3e8) [0198.288] Sleep (dwMilliseconds=0x3e8) [0198.290] Sleep (dwMilliseconds=0x3e8) [0198.292] Sleep (dwMilliseconds=0x3e8) [0198.296] Sleep (dwMilliseconds=0x3e8) [0198.298] Sleep (dwMilliseconds=0x3e8) [0198.300] Sleep (dwMilliseconds=0x3e8) [0198.302] Sleep (dwMilliseconds=0x3e8) [0198.305] Sleep (dwMilliseconds=0x3e8) [0198.307] Sleep (dwMilliseconds=0x3e8) [0198.309] Sleep (dwMilliseconds=0x3e8) [0198.311] Sleep (dwMilliseconds=0x3e8) [0198.313] Sleep (dwMilliseconds=0x3e8) [0198.315] Sleep (dwMilliseconds=0x3e8) [0198.317] Sleep (dwMilliseconds=0x3e8) [0198.319] Sleep (dwMilliseconds=0x3e8) [0198.321] Sleep (dwMilliseconds=0x3e8) [0198.323] Sleep (dwMilliseconds=0x3e8) [0198.325] Sleep (dwMilliseconds=0x3e8) [0198.327] Sleep (dwMilliseconds=0x3e8) [0198.329] Sleep (dwMilliseconds=0x3e8) [0198.333] Sleep (dwMilliseconds=0x3e8) [0198.335] Sleep (dwMilliseconds=0x3e8) [0198.337] Sleep (dwMilliseconds=0x3e8) [0198.339] Sleep (dwMilliseconds=0x3e8) [0198.341] Sleep (dwMilliseconds=0x3e8) [0198.343] Sleep (dwMilliseconds=0x3e8) [0198.345] Sleep (dwMilliseconds=0x3e8) [0198.347] Sleep (dwMilliseconds=0x3e8) [0198.349] Sleep (dwMilliseconds=0x3e8) [0198.350] Sleep (dwMilliseconds=0x3e8) [0198.352] Sleep (dwMilliseconds=0x3e8) [0198.354] Sleep (dwMilliseconds=0x3e8) [0198.355] Sleep (dwMilliseconds=0x3e8) [0198.357] Sleep (dwMilliseconds=0x3e8) [0198.359] Sleep (dwMilliseconds=0x3e8) [0198.361] Sleep (dwMilliseconds=0x3e8) [0198.362] Sleep (dwMilliseconds=0x3e8) [0198.364] Sleep (dwMilliseconds=0x3e8) [0198.366] Sleep (dwMilliseconds=0x3e8) [0198.369] Sleep (dwMilliseconds=0x3e8) [0198.371] Sleep (dwMilliseconds=0x3e8) [0198.373] Sleep (dwMilliseconds=0x3e8) [0198.374] Sleep (dwMilliseconds=0x3e8) [0198.376] Sleep (dwMilliseconds=0x3e8) [0198.378] Sleep (dwMilliseconds=0x3e8) [0198.380] Sleep (dwMilliseconds=0x3e8) [0198.382] Sleep (dwMilliseconds=0x3e8) [0198.384] Sleep (dwMilliseconds=0x3e8) [0198.386] Sleep (dwMilliseconds=0x3e8) [0198.388] Sleep (dwMilliseconds=0x3e8) [0198.390] Sleep (dwMilliseconds=0x3e8) [0198.392] Sleep (dwMilliseconds=0x3e8) [0198.394] Sleep (dwMilliseconds=0x3e8) [0198.396] Sleep (dwMilliseconds=0x3e8) [0198.398] Sleep (dwMilliseconds=0x3e8) [0198.400] Sleep (dwMilliseconds=0x3e8) [0198.402] Sleep (dwMilliseconds=0x3e8) [0198.404] Sleep (dwMilliseconds=0x3e8) [0198.407] Sleep (dwMilliseconds=0x3e8) [0198.410] Sleep (dwMilliseconds=0x3e8) [0198.411] Sleep (dwMilliseconds=0x3e8) [0198.413] Sleep (dwMilliseconds=0x3e8) [0198.415] Sleep (dwMilliseconds=0x3e8) [0198.421] Sleep (dwMilliseconds=0x3e8) [0198.423] Sleep (dwMilliseconds=0x3e8) [0198.425] Sleep (dwMilliseconds=0x3e8) [0198.427] Sleep (dwMilliseconds=0x3e8) [0198.431] Sleep (dwMilliseconds=0x3e8) [0198.433] Sleep (dwMilliseconds=0x3e8) [0198.434] Sleep (dwMilliseconds=0x3e8) [0198.436] Sleep (dwMilliseconds=0x3e8) [0198.438] Sleep (dwMilliseconds=0x3e8) [0198.440] Sleep (dwMilliseconds=0x3e8) [0198.442] Sleep (dwMilliseconds=0x3e8) [0198.444] Sleep (dwMilliseconds=0x3e8) [0198.447] Sleep (dwMilliseconds=0x3e8) [0198.448] Sleep (dwMilliseconds=0x3e8) [0198.450] Sleep (dwMilliseconds=0x3e8) [0198.453] Sleep (dwMilliseconds=0x3e8) [0198.454] Sleep (dwMilliseconds=0x3e8) [0198.473] Sleep (dwMilliseconds=0x3e8) [0198.475] Sleep (dwMilliseconds=0x3e8) [0198.477] Sleep (dwMilliseconds=0x3e8) [0198.479] Sleep (dwMilliseconds=0x3e8) [0198.481] Sleep (dwMilliseconds=0x3e8) [0198.483] Sleep (dwMilliseconds=0x3e8) [0198.485] Sleep (dwMilliseconds=0x3e8) [0198.488] Sleep (dwMilliseconds=0x3e8) [0198.490] Sleep (dwMilliseconds=0x3e8) [0198.492] Sleep (dwMilliseconds=0x3e8) [0198.513] Sleep (dwMilliseconds=0x3e8) [0198.515] Sleep (dwMilliseconds=0x3e8) [0198.517] Sleep (dwMilliseconds=0x3e8) [0198.519] Sleep (dwMilliseconds=0x3e8) [0198.525] Sleep (dwMilliseconds=0x3e8) [0198.526] Sleep (dwMilliseconds=0x3e8) [0198.529] Sleep (dwMilliseconds=0x3e8) [0198.531] Sleep (dwMilliseconds=0x3e8) [0198.533] Sleep (dwMilliseconds=0x3e8) [0198.535] Sleep (dwMilliseconds=0x3e8) [0198.538] Sleep (dwMilliseconds=0x3e8) [0198.539] Sleep (dwMilliseconds=0x3e8) [0198.541] Sleep (dwMilliseconds=0x3e8) [0198.543] Sleep (dwMilliseconds=0x3e8) [0198.545] Sleep (dwMilliseconds=0x3e8) [0198.549] Sleep (dwMilliseconds=0x3e8) [0198.551] Sleep (dwMilliseconds=0x3e8) [0198.553] Sleep (dwMilliseconds=0x3e8) [0198.555] Sleep (dwMilliseconds=0x3e8) [0198.557] Sleep (dwMilliseconds=0x3e8) [0198.559] Sleep (dwMilliseconds=0x3e8) [0198.561] Sleep (dwMilliseconds=0x3e8) [0198.563] Sleep (dwMilliseconds=0x3e8) [0198.565] Sleep (dwMilliseconds=0x3e8) [0198.567] Sleep (dwMilliseconds=0x3e8) [0198.569] Sleep (dwMilliseconds=0x3e8) [0198.573] Sleep (dwMilliseconds=0x3e8) [0198.575] Sleep (dwMilliseconds=0x3e8) [0198.577] Sleep (dwMilliseconds=0x3e8) [0198.579] Sleep (dwMilliseconds=0x3e8) [0198.581] Sleep (dwMilliseconds=0x3e8) [0198.583] Sleep (dwMilliseconds=0x3e8) [0198.585] Sleep (dwMilliseconds=0x3e8) [0198.587] Sleep (dwMilliseconds=0x3e8) [0198.598] Sleep (dwMilliseconds=0x3e8) [0198.600] Sleep (dwMilliseconds=0x3e8) [0198.602] Sleep (dwMilliseconds=0x3e8) [0198.604] Sleep (dwMilliseconds=0x3e8) [0198.606] Sleep (dwMilliseconds=0x3e8) [0198.608] Sleep (dwMilliseconds=0x3e8) [0198.610] Sleep (dwMilliseconds=0x3e8) [0198.612] Sleep (dwMilliseconds=0x3e8) [0198.614] Sleep (dwMilliseconds=0x3e8) [0198.618] Sleep (dwMilliseconds=0x3e8) [0198.624] Sleep (dwMilliseconds=0x3e8) [0198.626] Sleep (dwMilliseconds=0x3e8) [0198.628] Sleep (dwMilliseconds=0x3e8) [0198.630] Sleep (dwMilliseconds=0x3e8) [0198.633] Sleep (dwMilliseconds=0x3e8) [0198.635] Sleep (dwMilliseconds=0x3e8) [0198.640] Sleep (dwMilliseconds=0x3e8) [0198.642] Sleep (dwMilliseconds=0x3e8) [0198.644] Sleep (dwMilliseconds=0x3e8) [0198.665] Sleep (dwMilliseconds=0x3e8) [0198.667] Sleep (dwMilliseconds=0x3e8) [0198.669] Sleep (dwMilliseconds=0x3e8) [0198.671] Sleep (dwMilliseconds=0x3e8) [0198.674] Sleep (dwMilliseconds=0x3e8) [0198.676] Sleep (dwMilliseconds=0x3e8) [0198.678] Sleep (dwMilliseconds=0x3e8) [0198.680] Sleep (dwMilliseconds=0x3e8) [0198.684] Sleep (dwMilliseconds=0x3e8) [0198.685] Sleep (dwMilliseconds=0x3e8) [0198.687] Sleep (dwMilliseconds=0x3e8) [0198.689] Sleep (dwMilliseconds=0x3e8) [0198.691] Sleep (dwMilliseconds=0x3e8) [0198.693] Sleep (dwMilliseconds=0x3e8) [0198.696] Sleep (dwMilliseconds=0x3e8) [0198.697] Sleep (dwMilliseconds=0x3e8) [0198.699] Sleep (dwMilliseconds=0x3e8) [0198.701] Sleep (dwMilliseconds=0x3e8) [0198.703] Sleep (dwMilliseconds=0x3e8) [0198.705] Sleep (dwMilliseconds=0x3e8) [0198.707] Sleep (dwMilliseconds=0x3e8) [0198.709] Sleep (dwMilliseconds=0x3e8) [0198.711] Sleep (dwMilliseconds=0x3e8) [0198.713] Sleep (dwMilliseconds=0x3e8) [0198.715] Sleep (dwMilliseconds=0x3e8) [0198.717] Sleep (dwMilliseconds=0x3e8) [0198.719] Sleep (dwMilliseconds=0x3e8) [0198.721] Sleep (dwMilliseconds=0x3e8) [0198.723] Sleep (dwMilliseconds=0x3e8) [0198.724] Sleep (dwMilliseconds=0x3e8) [0198.726] Sleep (dwMilliseconds=0x3e8) [0198.728] Sleep (dwMilliseconds=0x3e8) [0198.730] Sleep (dwMilliseconds=0x3e8) [0198.746] Sleep (dwMilliseconds=0x3e8) [0198.748] Sleep (dwMilliseconds=0x3e8) [0198.750] Sleep (dwMilliseconds=0x3e8) [0198.752] Sleep (dwMilliseconds=0x3e8) [0198.754] Sleep (dwMilliseconds=0x3e8) [0198.766] Sleep (dwMilliseconds=0x3e8) [0198.768] Sleep (dwMilliseconds=0x3e8) [0198.778] Sleep (dwMilliseconds=0x3e8) [0198.781] Sleep (dwMilliseconds=0x3e8) [0198.783] Sleep (dwMilliseconds=0x3e8) [0198.784] Sleep (dwMilliseconds=0x3e8) [0198.786] Sleep (dwMilliseconds=0x3e8) [0198.788] Sleep (dwMilliseconds=0x3e8) [0198.790] Sleep (dwMilliseconds=0x3e8) [0198.792] Sleep (dwMilliseconds=0x3e8) [0198.794] Sleep (dwMilliseconds=0x3e8) [0198.796] Sleep (dwMilliseconds=0x3e8) [0198.798] Sleep (dwMilliseconds=0x3e8) [0198.820] Sleep (dwMilliseconds=0x3e8) [0198.822] Sleep (dwMilliseconds=0x3e8) [0198.824] Sleep (dwMilliseconds=0x3e8) [0198.826] Sleep (dwMilliseconds=0x3e8) [0198.830] Sleep (dwMilliseconds=0x3e8) [0198.831] Sleep (dwMilliseconds=0x3e8) [0198.832] Sleep (dwMilliseconds=0x3e8) [0198.835] Sleep (dwMilliseconds=0x3e8) [0198.842] Sleep (dwMilliseconds=0x3e8) [0198.845] Sleep (dwMilliseconds=0x3e8) [0198.846] Sleep (dwMilliseconds=0x3e8) [0198.865] Sleep (dwMilliseconds=0x3e8) [0198.867] Sleep (dwMilliseconds=0x3e8) [0198.870] Sleep (dwMilliseconds=0x3e8) [0198.872] Sleep (dwMilliseconds=0x3e8) [0198.874] Sleep (dwMilliseconds=0x3e8) [0198.876] Sleep (dwMilliseconds=0x3e8) [0198.878] Sleep (dwMilliseconds=0x3e8) [0198.880] Sleep (dwMilliseconds=0x3e8) [0198.882] Sleep (dwMilliseconds=0x3e8) [0198.884] Sleep (dwMilliseconds=0x3e8) [0198.886] Sleep (dwMilliseconds=0x3e8) [0198.888] Sleep (dwMilliseconds=0x3e8) [0198.890] Sleep (dwMilliseconds=0x3e8) [0198.892] Sleep (dwMilliseconds=0x3e8) [0198.894] Sleep (dwMilliseconds=0x3e8) [0198.896] Sleep (dwMilliseconds=0x3e8) [0198.898] Sleep (dwMilliseconds=0x3e8) [0198.900] Sleep (dwMilliseconds=0x3e8) [0198.902] Sleep (dwMilliseconds=0x3e8) [0198.904] Sleep (dwMilliseconds=0x3e8) [0198.906] Sleep (dwMilliseconds=0x3e8) [0198.908] Sleep (dwMilliseconds=0x3e8) [0198.911] Sleep (dwMilliseconds=0x3e8) [0198.913] Sleep (dwMilliseconds=0x3e8) [0198.915] Sleep (dwMilliseconds=0x3e8) [0198.917] Sleep (dwMilliseconds=0x3e8) [0198.919] Sleep (dwMilliseconds=0x3e8) [0198.921] Sleep (dwMilliseconds=0x3e8) [0198.923] Sleep (dwMilliseconds=0x3e8) [0198.925] Sleep (dwMilliseconds=0x3e8) [0198.927] Sleep (dwMilliseconds=0x3e8) [0198.929] Sleep (dwMilliseconds=0x3e8) [0198.931] Sleep (dwMilliseconds=0x3e8) [0198.933] Sleep (dwMilliseconds=0x3e8) [0198.935] Sleep (dwMilliseconds=0x3e8) [0198.941] Sleep (dwMilliseconds=0x3e8) [0198.943] Sleep (dwMilliseconds=0x3e8) [0198.945] Sleep (dwMilliseconds=0x3e8) [0198.947] Sleep (dwMilliseconds=0x3e8) [0198.949] Sleep (dwMilliseconds=0x3e8) [0198.951] Sleep (dwMilliseconds=0x3e8) [0198.953] Sleep (dwMilliseconds=0x3e8) [0198.956] Sleep (dwMilliseconds=0x3e8) [0198.958] Sleep (dwMilliseconds=0x3e8) [0198.960] Sleep (dwMilliseconds=0x3e8) [0198.962] Sleep (dwMilliseconds=0x3e8) [0198.964] Sleep (dwMilliseconds=0x3e8) [0198.976] Sleep (dwMilliseconds=0x3e8) [0198.978] Sleep (dwMilliseconds=0x3e8) [0198.980] Sleep (dwMilliseconds=0x3e8) [0198.982] Sleep (dwMilliseconds=0x3e8) [0198.984] Sleep (dwMilliseconds=0x3e8) [0198.986] Sleep (dwMilliseconds=0x3e8) [0198.988] Sleep (dwMilliseconds=0x3e8) [0198.990] Sleep (dwMilliseconds=0x3e8) [0198.992] Sleep (dwMilliseconds=0x3e8) [0198.996] Sleep (dwMilliseconds=0x3e8) [0198.997] Sleep (dwMilliseconds=0x3e8) [0198.999] Sleep (dwMilliseconds=0x3e8) [0199.002] Sleep (dwMilliseconds=0x3e8) [0199.006] Sleep (dwMilliseconds=0x3e8) [0199.008] Sleep (dwMilliseconds=0x3e8) [0199.010] Sleep (dwMilliseconds=0x3e8) [0199.012] Sleep (dwMilliseconds=0x3e8) [0199.014] Sleep (dwMilliseconds=0x3e8) [0199.019] Sleep (dwMilliseconds=0x3e8) [0199.040] Sleep (dwMilliseconds=0x3e8) [0199.042] Sleep (dwMilliseconds=0x3e8) [0199.044] Sleep (dwMilliseconds=0x3e8) [0199.046] Sleep (dwMilliseconds=0x3e8) [0199.048] Sleep (dwMilliseconds=0x3e8) [0199.050] Sleep (dwMilliseconds=0x3e8) [0199.052] Sleep (dwMilliseconds=0x3e8) [0199.054] Sleep (dwMilliseconds=0x3e8) [0199.056] Sleep (dwMilliseconds=0x3e8) [0199.059] Sleep (dwMilliseconds=0x3e8) [0199.064] Sleep (dwMilliseconds=0x3e8) [0199.065] Sleep (dwMilliseconds=0x3e8) [0199.067] Sleep (dwMilliseconds=0x3e8) [0199.073] Sleep (dwMilliseconds=0x3e8) [0199.075] Sleep (dwMilliseconds=0x3e8) [0199.100] Sleep (dwMilliseconds=0x3e8) [0199.110] Sleep (dwMilliseconds=0x3e8) [0199.111] Sleep (dwMilliseconds=0x3e8) [0199.113] Sleep (dwMilliseconds=0x3e8) [0199.115] Sleep (dwMilliseconds=0x3e8) [0199.117] Sleep (dwMilliseconds=0x3e8) [0199.120] Sleep (dwMilliseconds=0x3e8) [0199.122] Sleep (dwMilliseconds=0x3e8) [0199.124] Sleep (dwMilliseconds=0x3e8) [0199.126] Sleep (dwMilliseconds=0x3e8) [0199.128] Sleep (dwMilliseconds=0x3e8) [0199.130] Sleep (dwMilliseconds=0x3e8) [0199.132] Sleep (dwMilliseconds=0x3e8) [0199.134] Sleep (dwMilliseconds=0x3e8) [0199.138] Sleep (dwMilliseconds=0x3e8) [0199.140] Sleep (dwMilliseconds=0x3e8) [0199.142] Sleep (dwMilliseconds=0x3e8) [0199.144] Sleep (dwMilliseconds=0x3e8) [0199.147] Sleep (dwMilliseconds=0x3e8) [0199.149] Sleep (dwMilliseconds=0x3e8) [0199.151] Sleep (dwMilliseconds=0x3e8) [0199.153] Sleep (dwMilliseconds=0x3e8) [0199.155] Sleep (dwMilliseconds=0x3e8) [0199.157] Sleep (dwMilliseconds=0x3e8) [0199.349] Sleep (dwMilliseconds=0x3e8) [0199.352] Sleep (dwMilliseconds=0x3e8) [0199.356] Sleep (dwMilliseconds=0x3e8) [0199.358] Sleep (dwMilliseconds=0x3e8) [0199.360] Sleep (dwMilliseconds=0x3e8) [0199.362] Sleep (dwMilliseconds=0x3e8) [0199.364] Sleep (dwMilliseconds=0x3e8) [0199.366] Sleep (dwMilliseconds=0x3e8) [0199.368] Sleep (dwMilliseconds=0x3e8) [0199.370] Sleep (dwMilliseconds=0x3e8) [0199.372] Sleep (dwMilliseconds=0x3e8) [0199.377] Sleep (dwMilliseconds=0x3e8) [0199.379] Sleep (dwMilliseconds=0x3e8) [0199.381] Sleep (dwMilliseconds=0x3e8) [0199.383] Sleep (dwMilliseconds=0x3e8) [0199.385] Sleep (dwMilliseconds=0x3e8) [0199.387] Sleep (dwMilliseconds=0x3e8) [0199.389] Sleep (dwMilliseconds=0x3e8) [0199.392] Sleep (dwMilliseconds=0x3e8) [0199.394] Sleep (dwMilliseconds=0x3e8) [0199.396] Sleep (dwMilliseconds=0x3e8) [0199.398] Sleep (dwMilliseconds=0x3e8) [0199.400] Sleep (dwMilliseconds=0x3e8) [0199.402] Sleep (dwMilliseconds=0x3e8) [0199.404] Sleep (dwMilliseconds=0x3e8) [0199.406] Sleep (dwMilliseconds=0x3e8) [0199.408] Sleep (dwMilliseconds=0x3e8) [0199.410] Sleep (dwMilliseconds=0x3e8) [0199.412] Sleep (dwMilliseconds=0x3e8) [0199.414] Sleep (dwMilliseconds=0x3e8) [0199.416] Sleep (dwMilliseconds=0x3e8) [0199.418] Sleep (dwMilliseconds=0x3e8) [0199.423] Sleep (dwMilliseconds=0x3e8) [0199.425] Sleep (dwMilliseconds=0x3e8) [0199.427] Sleep (dwMilliseconds=0x3e8) [0199.431] Sleep (dwMilliseconds=0x3e8) [0199.433] Sleep (dwMilliseconds=0x3e8) [0199.435] Sleep (dwMilliseconds=0x3e8) [0199.437] Sleep (dwMilliseconds=0x3e8) [0199.457] Sleep (dwMilliseconds=0x3e8) [0199.459] Sleep (dwMilliseconds=0x3e8) [0199.463] Sleep (dwMilliseconds=0x3e8) [0199.468] Sleep (dwMilliseconds=0x3e8) [0199.470] Sleep (dwMilliseconds=0x3e8) [0199.472] Sleep (dwMilliseconds=0x3e8) [0199.475] Sleep (dwMilliseconds=0x3e8) [0199.477] Sleep (dwMilliseconds=0x3e8) [0199.479] Sleep (dwMilliseconds=0x3e8) [0199.481] Sleep (dwMilliseconds=0x3e8) [0199.483] Sleep (dwMilliseconds=0x3e8) [0199.485] Sleep (dwMilliseconds=0x3e8) [0199.489] Sleep (dwMilliseconds=0x3e8) [0199.491] Sleep (dwMilliseconds=0x3e8) [0199.493] Sleep (dwMilliseconds=0x3e8) [0199.495] Sleep (dwMilliseconds=0x3e8) [0199.498] Sleep (dwMilliseconds=0x3e8) [0199.506] Sleep (dwMilliseconds=0x3e8) [0199.508] Sleep (dwMilliseconds=0x3e8) [0199.510] Sleep (dwMilliseconds=0x3e8) [0199.515] Sleep (dwMilliseconds=0x3e8) [0199.517] Sleep (dwMilliseconds=0x3e8) [0199.519] Sleep (dwMilliseconds=0x3e8) [0199.521] Sleep (dwMilliseconds=0x3e8) [0199.523] Sleep (dwMilliseconds=0x3e8) [0199.525] Sleep (dwMilliseconds=0x3e8) [0199.527] Sleep (dwMilliseconds=0x3e8) [0199.529] Sleep (dwMilliseconds=0x3e8) [0199.531] Sleep (dwMilliseconds=0x3e8) [0199.533] Sleep (dwMilliseconds=0x3e8) [0199.535] Sleep (dwMilliseconds=0x3e8) [0199.537] Sleep (dwMilliseconds=0x3e8) [0199.539] Sleep (dwMilliseconds=0x3e8) [0199.541] Sleep (dwMilliseconds=0x3e8) [0199.544] Sleep (dwMilliseconds=0x3e8) [0199.548] Sleep (dwMilliseconds=0x3e8) [0199.551] Sleep (dwMilliseconds=0x3e8) [0199.553] Sleep (dwMilliseconds=0x3e8) [0199.556] Sleep (dwMilliseconds=0x3e8) [0199.558] Sleep (dwMilliseconds=0x3e8) [0199.560] Sleep (dwMilliseconds=0x3e8) [0199.562] Sleep (dwMilliseconds=0x3e8) [0199.565] Sleep (dwMilliseconds=0x3e8) [0199.566] Sleep (dwMilliseconds=0x3e8) [0199.568] Sleep (dwMilliseconds=0x3e8) [0199.570] Sleep (dwMilliseconds=0x3e8) [0199.572] Sleep (dwMilliseconds=0x3e8) [0199.574] Sleep (dwMilliseconds=0x3e8) [0199.576] Sleep (dwMilliseconds=0x3e8) [0199.578] Sleep (dwMilliseconds=0x3e8) [0199.609] Sleep (dwMilliseconds=0x3e8) [0199.611] Sleep (dwMilliseconds=0x3e8) [0199.613] Sleep (dwMilliseconds=0x3e8) [0199.615] Sleep (dwMilliseconds=0x3e8) [0199.617] Sleep (dwMilliseconds=0x3e8) [0199.619] Sleep (dwMilliseconds=0x3e8) [0199.624] Sleep (dwMilliseconds=0x3e8) [0199.626] Sleep (dwMilliseconds=0x3e8) [0199.628] Sleep (dwMilliseconds=0x3e8) [0199.630] Sleep (dwMilliseconds=0x3e8) [0199.634] Sleep (dwMilliseconds=0x3e8) [0199.638] Sleep (dwMilliseconds=0x3e8) [0199.641] Sleep (dwMilliseconds=0x3e8) [0199.642] Sleep (dwMilliseconds=0x3e8) [0199.644] Sleep (dwMilliseconds=0x3e8) [0199.646] Sleep (dwMilliseconds=0x3e8) [0199.650] Sleep (dwMilliseconds=0x3e8) [0199.652] Sleep (dwMilliseconds=0x3e8) [0199.654] Sleep (dwMilliseconds=0x3e8) [0199.657] Sleep (dwMilliseconds=0x3e8) [0199.659] Sleep (dwMilliseconds=0x3e8) [0199.661] Sleep (dwMilliseconds=0x3e8) [0199.663] Sleep (dwMilliseconds=0x3e8) [0199.665] Sleep (dwMilliseconds=0x3e8) [0199.667] Sleep (dwMilliseconds=0x3e8) [0199.669] Sleep (dwMilliseconds=0x3e8) [0199.671] Sleep (dwMilliseconds=0x3e8) [0199.673] Sleep (dwMilliseconds=0x3e8) [0199.691] Sleep (dwMilliseconds=0x3e8) [0199.693] Sleep (dwMilliseconds=0x3e8) [0199.695] Sleep (dwMilliseconds=0x3e8) [0199.697] Sleep (dwMilliseconds=0x3e8) [0199.701] Sleep (dwMilliseconds=0x3e8) [0199.702] Sleep (dwMilliseconds=0x3e8) [0199.704] Sleep (dwMilliseconds=0x3e8) [0199.707] Sleep (dwMilliseconds=0x3e8) [0199.709] Sleep (dwMilliseconds=0x3e8) [0199.711] Sleep (dwMilliseconds=0x3e8) [0199.713] Sleep (dwMilliseconds=0x3e8) [0199.715] Sleep (dwMilliseconds=0x3e8) [0199.717] Sleep (dwMilliseconds=0x3e8) [0199.719] Sleep (dwMilliseconds=0x3e8) [0199.721] Sleep (dwMilliseconds=0x3e8) [0199.723] Sleep (dwMilliseconds=0x3e8) [0199.725] Sleep (dwMilliseconds=0x3e8) [0199.727] Sleep (dwMilliseconds=0x3e8) [0199.729] Sleep (dwMilliseconds=0x3e8) [0199.731] Sleep (dwMilliseconds=0x3e8) [0199.733] Sleep (dwMilliseconds=0x3e8) [0199.735] Sleep (dwMilliseconds=0x3e8) [0199.737] Sleep (dwMilliseconds=0x3e8) [0199.739] Sleep (dwMilliseconds=0x3e8) [0199.741] Sleep (dwMilliseconds=0x3e8) [0199.743] Sleep (dwMilliseconds=0x3e8) [0199.746] Sleep (dwMilliseconds=0x3e8) [0199.747] Sleep (dwMilliseconds=0x3e8) [0199.770] Sleep (dwMilliseconds=0x3e8) [0199.772] Sleep (dwMilliseconds=0x3e8) [0199.774] Sleep (dwMilliseconds=0x3e8) [0199.776] Sleep (dwMilliseconds=0x3e8) [0199.778] Sleep (dwMilliseconds=0x3e8) [0199.780] Sleep (dwMilliseconds=0x3e8) [0199.782] Sleep (dwMilliseconds=0x3e8) [0199.784] Sleep (dwMilliseconds=0x3e8) [0199.786] Sleep (dwMilliseconds=0x3e8) [0199.788] Sleep (dwMilliseconds=0x3e8) [0199.790] Sleep (dwMilliseconds=0x3e8) [0199.794] Sleep (dwMilliseconds=0x3e8) [0199.796] Sleep (dwMilliseconds=0x3e8) [0199.798] Sleep (dwMilliseconds=0x3e8) [0199.800] Sleep (dwMilliseconds=0x3e8) [0199.802] Sleep (dwMilliseconds=0x3e8) [0199.804] Sleep (dwMilliseconds=0x3e8) [0199.805] Sleep (dwMilliseconds=0x3e8) [0199.807] Sleep (dwMilliseconds=0x3e8) [0199.809] Sleep (dwMilliseconds=0x3e8) [0199.811] Sleep (dwMilliseconds=0x3e8) [0199.813] Sleep (dwMilliseconds=0x3e8) [0199.815] Sleep (dwMilliseconds=0x3e8) [0199.817] Sleep (dwMilliseconds=0x3e8) [0199.819] Sleep (dwMilliseconds=0x3e8) [0199.821] Sleep (dwMilliseconds=0x3e8) [0199.825] Sleep (dwMilliseconds=0x3e8) [0199.828] Sleep (dwMilliseconds=0x3e8) [0199.830] Sleep (dwMilliseconds=0x3e8) [0199.832] Sleep (dwMilliseconds=0x3e8) [0199.834] Sleep (dwMilliseconds=0x3e8) [0199.836] Sleep (dwMilliseconds=0x3e8) [0199.838] Sleep (dwMilliseconds=0x3e8) [0199.840] Sleep (dwMilliseconds=0x3e8) [0199.842] Sleep (dwMilliseconds=0x3e8) [0199.844] Sleep (dwMilliseconds=0x3e8) [0199.846] Sleep (dwMilliseconds=0x3e8) [0199.866] Sleep (dwMilliseconds=0x3e8) [0199.868] Sleep (dwMilliseconds=0x3e8) [0199.872] Sleep (dwMilliseconds=0x3e8) [0199.874] Sleep (dwMilliseconds=0x3e8) [0199.876] Sleep (dwMilliseconds=0x3e8) [0199.878] Sleep (dwMilliseconds=0x3e8) [0199.880] Sleep (dwMilliseconds=0x3e8) [0199.882] Sleep (dwMilliseconds=0x3e8) [0199.883] Sleep (dwMilliseconds=0x3e8) [0199.885] Sleep (dwMilliseconds=0x3e8) [0199.887] Sleep (dwMilliseconds=0x3e8) [0199.889] Sleep (dwMilliseconds=0x3e8) [0199.891] Sleep (dwMilliseconds=0x3e8) [0199.893] Sleep (dwMilliseconds=0x3e8) [0199.895] Sleep (dwMilliseconds=0x3e8) [0199.897] Sleep (dwMilliseconds=0x3e8) [0199.899] Sleep (dwMilliseconds=0x3e8) [0199.901] Sleep (dwMilliseconds=0x3e8) [0199.903] Sleep (dwMilliseconds=0x3e8) [0199.906] Sleep (dwMilliseconds=0x3e8) [0199.908] Sleep (dwMilliseconds=0x3e8) [0199.910] Sleep (dwMilliseconds=0x3e8) [0199.912] Sleep (dwMilliseconds=0x3e8) [0199.915] Sleep (dwMilliseconds=0x3e8) [0199.916] Sleep (dwMilliseconds=0x3e8) [0199.918] Sleep (dwMilliseconds=0x3e8) [0199.920] Sleep (dwMilliseconds=0x3e8) [0199.922] Sleep (dwMilliseconds=0x3e8) [0199.924] Sleep (dwMilliseconds=0x3e8) [0199.926] Sleep (dwMilliseconds=0x3e8) [0199.928] Sleep (dwMilliseconds=0x3e8) [0199.930] Sleep (dwMilliseconds=0x3e8) [0199.932] Sleep (dwMilliseconds=0x3e8) [0199.934] Sleep (dwMilliseconds=0x3e8) [0199.936] Sleep (dwMilliseconds=0x3e8) [0199.938] Sleep (dwMilliseconds=0x3e8) [0199.940] Sleep (dwMilliseconds=0x3e8) [0199.942] Sleep (dwMilliseconds=0x3e8) [0199.944] Sleep (dwMilliseconds=0x3e8) [0199.946] Sleep (dwMilliseconds=0x3e8) [0199.948] Sleep (dwMilliseconds=0x3e8) [0199.950] Sleep (dwMilliseconds=0x3e8) [0199.953] Sleep (dwMilliseconds=0x3e8) [0199.954] Sleep (dwMilliseconds=0x3e8) [0199.956] Sleep (dwMilliseconds=0x3e8) [0199.958] Sleep (dwMilliseconds=0x3e8) [0199.960] Sleep (dwMilliseconds=0x3e8) [0199.963] Sleep (dwMilliseconds=0x3e8) [0199.964] Sleep (dwMilliseconds=0x3e8) [0199.968] Sleep (dwMilliseconds=0x3e8) [0199.970] Sleep (dwMilliseconds=0x3e8) [0199.972] Sleep (dwMilliseconds=0x3e8) [0199.974] Sleep (dwMilliseconds=0x3e8) [0199.993] Sleep (dwMilliseconds=0x3e8) [0199.995] Sleep (dwMilliseconds=0x3e8) [0199.997] Sleep (dwMilliseconds=0x3e8) [0199.999] Sleep (dwMilliseconds=0x3e8) [0200.001] Sleep (dwMilliseconds=0x3e8) [0200.004] Sleep (dwMilliseconds=0x3e8) [0200.006] Sleep (dwMilliseconds=0x3e8) [0200.008] Sleep (dwMilliseconds=0x3e8) [0200.010] Sleep (dwMilliseconds=0x3e8) [0200.012] Sleep (dwMilliseconds=0x3e8) [0200.014] Sleep (dwMilliseconds=0x3e8) [0200.016] Sleep (dwMilliseconds=0x3e8) [0200.017] Sleep (dwMilliseconds=0x3e8) [0200.019] Sleep (dwMilliseconds=0x3e8) [0200.021] Sleep (dwMilliseconds=0x3e8) [0200.024] Sleep (dwMilliseconds=0x3e8) [0200.028] Sleep (dwMilliseconds=0x3e8) [0200.031] Sleep (dwMilliseconds=0x3e8) [0200.033] Sleep (dwMilliseconds=0x3e8) [0200.036] Sleep (dwMilliseconds=0x3e8) [0200.037] Sleep (dwMilliseconds=0x3e8) [0200.044] Sleep (dwMilliseconds=0x3e8) [0200.046] Sleep (dwMilliseconds=0x3e8) [0200.048] Sleep (dwMilliseconds=0x3e8) [0200.050] Sleep (dwMilliseconds=0x3e8) [0200.052] Sleep (dwMilliseconds=0x3e8) [0200.057] Sleep (dwMilliseconds=0x3e8) [0200.064] Sleep (dwMilliseconds=0x3e8) [0200.067] Sleep (dwMilliseconds=0x3e8) [0200.100] Sleep (dwMilliseconds=0x3e8) [0200.102] Sleep (dwMilliseconds=0x3e8) [0200.104] Sleep (dwMilliseconds=0x3e8) [0200.107] Sleep (dwMilliseconds=0x3e8) [0200.109] Sleep (dwMilliseconds=0x3e8) [0200.112] Sleep (dwMilliseconds=0x3e8) [0200.114] Sleep (dwMilliseconds=0x3e8) [0200.118] Sleep (dwMilliseconds=0x3e8) [0200.128] Sleep (dwMilliseconds=0x3e8) [0200.130] Sleep (dwMilliseconds=0x3e8) [0200.131] Sleep (dwMilliseconds=0x3e8) [0200.133] Sleep (dwMilliseconds=0x3e8) [0200.135] Sleep (dwMilliseconds=0x3e8) [0200.142] Sleep (dwMilliseconds=0x3e8) [0200.145] Sleep (dwMilliseconds=0x3e8) [0200.146] Sleep (dwMilliseconds=0x3e8) [0200.149] Sleep (dwMilliseconds=0x3e8) [0200.152] Sleep (dwMilliseconds=0x3e8) [0200.153] Sleep (dwMilliseconds=0x3e8) [0200.155] Sleep (dwMilliseconds=0x3e8) [0200.157] Sleep (dwMilliseconds=0x3e8) [0200.159] Sleep (dwMilliseconds=0x3e8) [0200.161] Sleep (dwMilliseconds=0x3e8) [0200.163] Sleep (dwMilliseconds=0x3e8) [0200.172] Sleep (dwMilliseconds=0x3e8) [0200.174] Sleep (dwMilliseconds=0x3e8) [0200.176] Sleep (dwMilliseconds=0x3e8) [0200.178] Sleep (dwMilliseconds=0x3e8) [0200.180] Sleep (dwMilliseconds=0x3e8) [0200.182] Sleep (dwMilliseconds=0x3e8) [0200.184] Sleep (dwMilliseconds=0x3e8) [0200.185] Sleep (dwMilliseconds=0x3e8) [0200.187] Sleep (dwMilliseconds=0x3e8) [0200.189] Sleep (dwMilliseconds=0x3e8) [0200.191] Sleep (dwMilliseconds=0x3e8) [0200.193] Sleep (dwMilliseconds=0x3e8) [0200.195] Sleep (dwMilliseconds=0x3e8) [0200.199] Sleep (dwMilliseconds=0x3e8) [0200.201] Sleep (dwMilliseconds=0x3e8) [0200.203] Sleep (dwMilliseconds=0x3e8) [0200.205] Sleep (dwMilliseconds=0x3e8) [0200.238] Sleep (dwMilliseconds=0x3e8) [0200.240] Sleep (dwMilliseconds=0x3e8) [0200.242] Sleep (dwMilliseconds=0x3e8) [0200.244] Sleep (dwMilliseconds=0x3e8) [0200.246] Sleep (dwMilliseconds=0x3e8) [0200.248] Sleep (dwMilliseconds=0x3e8) [0200.254] Sleep (dwMilliseconds=0x3e8) [0200.256] Sleep (dwMilliseconds=0x3e8) [0200.260] Sleep (dwMilliseconds=0x3e8) [0200.261] Sleep (dwMilliseconds=0x3e8) [0200.264] Sleep (dwMilliseconds=0x3e8) [0200.267] Sleep (dwMilliseconds=0x3e8) [0200.269] Sleep (dwMilliseconds=0x3e8) [0200.271] Sleep (dwMilliseconds=0x3e8) [0200.273] Sleep (dwMilliseconds=0x3e8) [0200.313] Sleep (dwMilliseconds=0x3e8) [0200.315] Sleep (dwMilliseconds=0x3e8) [0200.317] Sleep (dwMilliseconds=0x3e8) [0200.320] Sleep (dwMilliseconds=0x3e8) [0200.323] Sleep (dwMilliseconds=0x3e8) [0200.324] Sleep (dwMilliseconds=0x3e8) [0200.328] Sleep (dwMilliseconds=0x3e8) [0200.356] Sleep (dwMilliseconds=0x3e8) [0200.386] Sleep (dwMilliseconds=0x3e8) [0200.388] Sleep (dwMilliseconds=0x3e8) [0200.390] Sleep (dwMilliseconds=0x3e8) [0200.392] Sleep (dwMilliseconds=0x3e8) [0200.394] Sleep (dwMilliseconds=0x3e8) [0200.399] Sleep (dwMilliseconds=0x3e8) [0200.401] Sleep (dwMilliseconds=0x3e8) [0200.403] Sleep (dwMilliseconds=0x3e8) [0200.405] Sleep (dwMilliseconds=0x3e8) [0200.408] Sleep (dwMilliseconds=0x3e8) [0200.409] Sleep (dwMilliseconds=0x3e8) [0200.413] Sleep (dwMilliseconds=0x3e8) [0200.415] Sleep (dwMilliseconds=0x3e8) [0200.416] Sleep (dwMilliseconds=0x3e8) [0200.419] Sleep (dwMilliseconds=0x3e8) [0200.445] Sleep (dwMilliseconds=0x3e8) [0200.448] Sleep (dwMilliseconds=0x3e8) [0200.449] Sleep (dwMilliseconds=0x3e8) [0200.451] Sleep (dwMilliseconds=0x3e8) [0200.453] Sleep (dwMilliseconds=0x3e8) [0200.456] Sleep (dwMilliseconds=0x3e8) [0200.458] Sleep (dwMilliseconds=0x3e8) [0200.461] Sleep (dwMilliseconds=0x3e8) [0200.463] Sleep (dwMilliseconds=0x3e8) [0200.468] Sleep (dwMilliseconds=0x3e8) [0200.470] Sleep (dwMilliseconds=0x3e8) [0200.472] Sleep (dwMilliseconds=0x3e8) [0200.474] Sleep (dwMilliseconds=0x3e8) [0200.478] Sleep (dwMilliseconds=0x3e8) [0200.482] Sleep (dwMilliseconds=0x3e8) [0200.484] Sleep (dwMilliseconds=0x3e8) [0200.486] Sleep (dwMilliseconds=0x3e8) [0200.488] Sleep (dwMilliseconds=0x3e8) [0200.490] Sleep (dwMilliseconds=0x3e8) [0200.492] Sleep (dwMilliseconds=0x3e8) [0200.494] Sleep (dwMilliseconds=0x3e8) [0200.496] Sleep (dwMilliseconds=0x3e8) [0200.498] Sleep (dwMilliseconds=0x3e8) [0200.500] Sleep (dwMilliseconds=0x3e8) [0200.502] Sleep (dwMilliseconds=0x3e8) [0200.504] Sleep (dwMilliseconds=0x3e8) [0200.506] Sleep (dwMilliseconds=0x3e8) [0200.508] Sleep (dwMilliseconds=0x3e8) [0200.510] Sleep (dwMilliseconds=0x3e8) [0200.513] Sleep (dwMilliseconds=0x3e8) [0200.515] Sleep (dwMilliseconds=0x3e8) [0200.518] Sleep (dwMilliseconds=0x3e8) [0200.521] Sleep (dwMilliseconds=0x3e8) [0200.523] Sleep (dwMilliseconds=0x3e8) [0200.525] Sleep (dwMilliseconds=0x3e8) [0200.527] Sleep (dwMilliseconds=0x3e8) [0200.529] Sleep (dwMilliseconds=0x3e8) [0200.531] Sleep (dwMilliseconds=0x3e8) [0200.533] Sleep (dwMilliseconds=0x3e8) [0200.547] Sleep (dwMilliseconds=0x3e8) [0200.549] Sleep (dwMilliseconds=0x3e8) [0200.551] Sleep (dwMilliseconds=0x3e8) [0200.553] Sleep (dwMilliseconds=0x3e8) [0200.555] Sleep (dwMilliseconds=0x3e8) [0200.612] Sleep (dwMilliseconds=0x3e8) [0200.614] Sleep (dwMilliseconds=0x3e8) [0200.616] Sleep (dwMilliseconds=0x3e8) [0200.618] Sleep (dwMilliseconds=0x3e8) [0200.621] Sleep (dwMilliseconds=0x3e8) [0200.623] Sleep (dwMilliseconds=0x3e8) [0200.625] Sleep (dwMilliseconds=0x3e8) [0200.627] Sleep (dwMilliseconds=0x3e8) [0200.629] Sleep (dwMilliseconds=0x3e8) [0200.656] Sleep (dwMilliseconds=0x3e8) [0200.665] Sleep (dwMilliseconds=0x3e8) [0200.667] Sleep (dwMilliseconds=0x3e8) [0200.670] Sleep (dwMilliseconds=0x3e8) [0200.672] Sleep (dwMilliseconds=0x3e8) [0200.674] Sleep (dwMilliseconds=0x3e8) [0200.676] Sleep (dwMilliseconds=0x3e8) [0200.678] Sleep (dwMilliseconds=0x3e8) [0200.680] Sleep (dwMilliseconds=0x3e8) [0200.682] Sleep (dwMilliseconds=0x3e8) [0200.684] Sleep (dwMilliseconds=0x3e8) [0200.686] Sleep (dwMilliseconds=0x3e8) [0200.688] Sleep (dwMilliseconds=0x3e8) [0200.690] Sleep (dwMilliseconds=0x3e8) [0200.691] Sleep (dwMilliseconds=0x3e8) [0200.693] Sleep (dwMilliseconds=0x3e8) [0200.695] Sleep (dwMilliseconds=0x3e8) [0200.699] Sleep (dwMilliseconds=0x3e8) [0200.702] Sleep (dwMilliseconds=0x3e8) [0200.710] Sleep (dwMilliseconds=0x3e8) [0200.712] Sleep (dwMilliseconds=0x3e8) [0200.721] Sleep (dwMilliseconds=0x3e8) [0200.723] Sleep (dwMilliseconds=0x3e8) [0200.759] Sleep (dwMilliseconds=0x3e8) [0200.761] Sleep (dwMilliseconds=0x3e8) [0200.764] Sleep (dwMilliseconds=0x3e8) [0200.765] Sleep (dwMilliseconds=0x3e8) [0200.767] Sleep (dwMilliseconds=0x3e8) [0200.769] Sleep (dwMilliseconds=0x3e8) [0200.779] Sleep (dwMilliseconds=0x3e8) [0200.782] Sleep (dwMilliseconds=0x3e8) [0200.791] Sleep (dwMilliseconds=0x3e8) [0200.793] Sleep (dwMilliseconds=0x3e8) [0200.797] Sleep (dwMilliseconds=0x3e8) [0200.799] Sleep (dwMilliseconds=0x3e8) [0200.805] Sleep (dwMilliseconds=0x3e8) [0200.808] Sleep (dwMilliseconds=0x3e8) [0200.810] Sleep (dwMilliseconds=0x3e8) [0200.813] Sleep (dwMilliseconds=0x3e8) [0200.815] Sleep (dwMilliseconds=0x3e8) [0200.818] Sleep (dwMilliseconds=0x3e8) [0200.820] Sleep (dwMilliseconds=0x3e8) [0200.822] Sleep (dwMilliseconds=0x3e8) [0200.824] Sleep (dwMilliseconds=0x3e8) [0200.828] Sleep (dwMilliseconds=0x3e8) [0200.835] Sleep (dwMilliseconds=0x3e8) [0200.837] Sleep (dwMilliseconds=0x3e8) [0200.839] Sleep (dwMilliseconds=0x3e8) [0200.841] Sleep (dwMilliseconds=0x3e8) [0200.843] Sleep (dwMilliseconds=0x3e8) [0200.845] Sleep (dwMilliseconds=0x3e8) [0200.847] Sleep (dwMilliseconds=0x3e8) [0200.849] Sleep (dwMilliseconds=0x3e8) [0200.851] Sleep (dwMilliseconds=0x3e8) [0200.853] Sleep (dwMilliseconds=0x3e8) [0200.855] Sleep (dwMilliseconds=0x3e8) [0200.857] Sleep (dwMilliseconds=0x3e8) [0200.859] Sleep (dwMilliseconds=0x3e8) [0200.861] Sleep (dwMilliseconds=0x3e8) [0200.878] Sleep (dwMilliseconds=0x3e8) [0200.902] Sleep (dwMilliseconds=0x3e8) [0200.905] Sleep (dwMilliseconds=0x3e8) [0200.907] Sleep (dwMilliseconds=0x3e8) [0200.909] Sleep (dwMilliseconds=0x3e8) [0200.911] Sleep (dwMilliseconds=0x3e8) [0200.913] Sleep (dwMilliseconds=0x3e8) [0200.915] Sleep (dwMilliseconds=0x3e8) [0200.917] Sleep (dwMilliseconds=0x3e8) [0200.921] Sleep (dwMilliseconds=0x3e8) [0200.923] Sleep (dwMilliseconds=0x3e8) [0200.925] Sleep (dwMilliseconds=0x3e8) [0200.927] Sleep (dwMilliseconds=0x3e8) [0200.929] Sleep (dwMilliseconds=0x3e8) [0200.931] Sleep (dwMilliseconds=0x3e8) [0200.933] Sleep (dwMilliseconds=0x3e8) [0200.935] Sleep (dwMilliseconds=0x3e8) [0200.937] Sleep (dwMilliseconds=0x3e8) [0200.939] Sleep (dwMilliseconds=0x3e8) [0200.941] Sleep (dwMilliseconds=0x3e8) [0200.943] Sleep (dwMilliseconds=0x3e8) [0200.945] Sleep (dwMilliseconds=0x3e8) [0200.947] Sleep (dwMilliseconds=0x3e8) [0200.950] Sleep (dwMilliseconds=0x3e8) [0200.953] Sleep (dwMilliseconds=0x3e8) [0200.955] Sleep (dwMilliseconds=0x3e8) [0200.957] Sleep (dwMilliseconds=0x3e8) [0200.959] Sleep (dwMilliseconds=0x3e8) [0200.961] Sleep (dwMilliseconds=0x3e8) [0200.963] Sleep (dwMilliseconds=0x3e8) [0200.965] Sleep (dwMilliseconds=0x3e8) [0200.967] Sleep (dwMilliseconds=0x3e8) [0200.969] Sleep (dwMilliseconds=0x3e8) [0200.971] Sleep (dwMilliseconds=0x3e8) [0200.973] Sleep (dwMilliseconds=0x3e8) [0200.975] Sleep (dwMilliseconds=0x3e8) [0200.978] Sleep (dwMilliseconds=0x3e8) [0200.990] Sleep (dwMilliseconds=0x3e8) [0200.991] Sleep (dwMilliseconds=0x3e8) [0200.994] Sleep (dwMilliseconds=0x3e8) [0200.995] Sleep (dwMilliseconds=0x3e8) [0200.997] Sleep (dwMilliseconds=0x3e8) [0200.999] Sleep (dwMilliseconds=0x3e8) [0201.002] Sleep (dwMilliseconds=0x3e8) [0201.004] Sleep (dwMilliseconds=0x3e8) [0201.006] Sleep (dwMilliseconds=0x3e8) [0201.008] Sleep (dwMilliseconds=0x3e8) [0201.010] Sleep (dwMilliseconds=0x3e8) [0201.012] Sleep (dwMilliseconds=0x3e8) [0201.014] Sleep (dwMilliseconds=0x3e8) [0201.016] Sleep (dwMilliseconds=0x3e8) [0201.019] Sleep (dwMilliseconds=0x3e8) [0201.033] Sleep (dwMilliseconds=0x3e8) [0201.035] Sleep (dwMilliseconds=0x3e8) [0201.040] Sleep (dwMilliseconds=0x3e8) [0201.042] Sleep (dwMilliseconds=0x3e8) [0201.044] Sleep (dwMilliseconds=0x3e8) [0201.046] Sleep (dwMilliseconds=0x3e8) [0201.049] Sleep (dwMilliseconds=0x3e8) [0201.051] Sleep (dwMilliseconds=0x3e8) [0201.053] Sleep (dwMilliseconds=0x3e8) [0201.055] Sleep (dwMilliseconds=0x3e8) [0201.057] Sleep (dwMilliseconds=0x3e8) [0201.058] Sleep (dwMilliseconds=0x3e8) [0201.060] Sleep (dwMilliseconds=0x3e8) [0201.080] Sleep (dwMilliseconds=0x3e8) [0201.083] Sleep (dwMilliseconds=0x3e8) [0201.085] Sleep (dwMilliseconds=0x3e8) [0201.087] Sleep (dwMilliseconds=0x3e8) [0201.089] Sleep (dwMilliseconds=0x3e8) [0201.092] Sleep (dwMilliseconds=0x3e8) [0201.093] Sleep (dwMilliseconds=0x3e8) [0201.095] Sleep (dwMilliseconds=0x3e8) [0201.097] Sleep (dwMilliseconds=0x3e8) [0201.099] Sleep (dwMilliseconds=0x3e8) [0201.101] Sleep (dwMilliseconds=0x3e8) [0201.103] Sleep (dwMilliseconds=0x3e8) [0201.105] Sleep (dwMilliseconds=0x3e8) [0201.107] Sleep (dwMilliseconds=0x3e8) [0201.117] Sleep (dwMilliseconds=0x3e8) [0201.119] Sleep (dwMilliseconds=0x3e8) [0201.124] Sleep (dwMilliseconds=0x3e8) [0201.125] Sleep (dwMilliseconds=0x3e8) [0201.127] Sleep (dwMilliseconds=0x3e8) [0201.129] Sleep (dwMilliseconds=0x3e8) [0201.133] Sleep (dwMilliseconds=0x3e8) [0201.135] Sleep (dwMilliseconds=0x3e8) [0201.137] Sleep (dwMilliseconds=0x3e8) [0201.139] Sleep (dwMilliseconds=0x3e8) [0201.146] Sleep (dwMilliseconds=0x3e8) [0201.148] Sleep (dwMilliseconds=0x3e8) [0201.150] Sleep (dwMilliseconds=0x3e8) [0201.152] Sleep (dwMilliseconds=0x3e8) [0201.154] Sleep (dwMilliseconds=0x3e8) [0201.156] Sleep (dwMilliseconds=0x3e8) [0201.158] Sleep (dwMilliseconds=0x3e8) [0201.160] Sleep (dwMilliseconds=0x3e8) [0201.162] Sleep (dwMilliseconds=0x3e8) [0201.164] Sleep (dwMilliseconds=0x3e8) [0201.166] Sleep (dwMilliseconds=0x3e8) [0201.168] Sleep (dwMilliseconds=0x3e8) [0201.170] Sleep (dwMilliseconds=0x3e8) [0201.183] Sleep (dwMilliseconds=0x3e8) [0201.190] Sleep (dwMilliseconds=0x3e8) [0201.195] Sleep (dwMilliseconds=0x3e8) [0201.196] Sleep (dwMilliseconds=0x3e8) [0201.199] Sleep (dwMilliseconds=0x3e8) [0201.201] Sleep (dwMilliseconds=0x3e8) [0201.203] Sleep (dwMilliseconds=0x3e8) [0201.205] Sleep (dwMilliseconds=0x3e8) [0201.242] Sleep (dwMilliseconds=0x3e8) [0201.250] Sleep (dwMilliseconds=0x3e8) [0201.252] Sleep (dwMilliseconds=0x3e8) [0201.264] Sleep (dwMilliseconds=0x3e8) [0201.297] Sleep (dwMilliseconds=0x3e8) [0201.300] Sleep (dwMilliseconds=0x3e8) [0201.305] Sleep (dwMilliseconds=0x3e8) [0201.307] Sleep (dwMilliseconds=0x3e8) [0201.312] Sleep (dwMilliseconds=0x3e8) [0201.316] Sleep (dwMilliseconds=0x3e8) [0201.327] Sleep (dwMilliseconds=0x3e8) [0201.329] Sleep (dwMilliseconds=0x3e8) [0201.332] Sleep (dwMilliseconds=0x3e8) [0201.334] Sleep (dwMilliseconds=0x3e8) [0201.337] Sleep (dwMilliseconds=0x3e8) [0201.339] Sleep (dwMilliseconds=0x3e8) [0201.341] Sleep (dwMilliseconds=0x3e8) [0201.343] Sleep (dwMilliseconds=0x3e8) [0201.345] Sleep (dwMilliseconds=0x3e8) [0201.347] Sleep (dwMilliseconds=0x3e8) [0201.353] Sleep (dwMilliseconds=0x3e8) [0201.355] Sleep (dwMilliseconds=0x3e8) [0201.358] Sleep (dwMilliseconds=0x3e8) [0201.360] Sleep (dwMilliseconds=0x3e8) [0201.362] Sleep (dwMilliseconds=0x3e8) [0201.364] Sleep (dwMilliseconds=0x3e8) [0201.366] Sleep (dwMilliseconds=0x3e8) [0201.370] Sleep (dwMilliseconds=0x3e8) [0201.372] Sleep (dwMilliseconds=0x3e8) [0201.374] Sleep (dwMilliseconds=0x3e8) [0201.396] Sleep (dwMilliseconds=0x3e8) [0201.398] Sleep (dwMilliseconds=0x3e8) [0201.400] Sleep (dwMilliseconds=0x3e8) [0201.402] Sleep (dwMilliseconds=0x3e8) [0201.404] Sleep (dwMilliseconds=0x3e8) [0201.406] Sleep (dwMilliseconds=0x3e8) [0201.415] Sleep (dwMilliseconds=0x3e8) [0201.428] Sleep (dwMilliseconds=0x3e8) [0201.476] Sleep (dwMilliseconds=0x3e8) [0201.485] Sleep (dwMilliseconds=0x3e8) [0201.488] Sleep (dwMilliseconds=0x3e8) [0201.493] Sleep (dwMilliseconds=0x3e8) [0201.496] Sleep (dwMilliseconds=0x3e8) [0201.498] Sleep (dwMilliseconds=0x3e8) [0201.499] Sleep (dwMilliseconds=0x3e8) [0201.500] Sleep (dwMilliseconds=0x3e8) [0201.502] Sleep (dwMilliseconds=0x3e8) [0201.509] Sleep (dwMilliseconds=0x3e8) [0201.510] Sleep (dwMilliseconds=0x3e8) [0201.512] Sleep (dwMilliseconds=0x3e8) [0201.514] Sleep (dwMilliseconds=0x3e8) [0201.516] Sleep (dwMilliseconds=0x3e8) [0201.518] Sleep (dwMilliseconds=0x3e8) [0201.523] Sleep (dwMilliseconds=0x3e8) [0201.525] Sleep (dwMilliseconds=0x3e8) [0201.526] Sleep (dwMilliseconds=0x3e8) [0201.529] Sleep (dwMilliseconds=0x3e8) [0201.530] Sleep (dwMilliseconds=0x3e8) [0201.533] Sleep (dwMilliseconds=0x3e8) [0201.534] Sleep (dwMilliseconds=0x3e8) [0201.536] Sleep (dwMilliseconds=0x3e8) [0201.538] Sleep (dwMilliseconds=0x3e8) [0201.541] Sleep (dwMilliseconds=0x3e8) [0201.542] Sleep (dwMilliseconds=0x3e8) [0201.569] Sleep (dwMilliseconds=0x3e8) [0201.572] Sleep (dwMilliseconds=0x3e8) [0201.574] Sleep (dwMilliseconds=0x3e8) [0201.576] Sleep (dwMilliseconds=0x3e8) [0201.578] Sleep (dwMilliseconds=0x3e8) [0201.580] Sleep (dwMilliseconds=0x3e8) [0201.583] Sleep (dwMilliseconds=0x3e8) [0201.584] Sleep (dwMilliseconds=0x3e8) [0201.588] Sleep (dwMilliseconds=0x3e8) [0201.605] Sleep (dwMilliseconds=0x3e8) [0201.607] Sleep (dwMilliseconds=0x3e8) [0201.609] Sleep (dwMilliseconds=0x3e8) [0201.613] Sleep (dwMilliseconds=0x3e8) [0201.622] Sleep (dwMilliseconds=0x3e8) [0201.637] Sleep (dwMilliseconds=0x3e8) [0201.639] Sleep (dwMilliseconds=0x3e8) [0201.641] Sleep (dwMilliseconds=0x3e8) [0201.643] Sleep (dwMilliseconds=0x3e8) [0201.645] Sleep (dwMilliseconds=0x3e8) [0201.647] Sleep (dwMilliseconds=0x3e8) [0201.649] Sleep (dwMilliseconds=0x3e8) [0201.651] Sleep (dwMilliseconds=0x3e8) [0201.653] Sleep (dwMilliseconds=0x3e8) [0201.655] Sleep (dwMilliseconds=0x3e8) [0201.657] Sleep (dwMilliseconds=0x3e8) [0201.659] Sleep (dwMilliseconds=0x3e8) [0201.661] Sleep (dwMilliseconds=0x3e8) [0201.667] Sleep (dwMilliseconds=0x3e8) [0201.668] Sleep (dwMilliseconds=0x3e8) [0201.670] Sleep (dwMilliseconds=0x3e8) [0201.672] Sleep (dwMilliseconds=0x3e8) [0201.674] Sleep (dwMilliseconds=0x3e8) [0201.676] Sleep (dwMilliseconds=0x3e8) [0201.678] Sleep (dwMilliseconds=0x3e8) [0201.700] Sleep (dwMilliseconds=0x3e8) [0201.704] Sleep (dwMilliseconds=0x3e8) [0201.706] Sleep (dwMilliseconds=0x3e8) [0201.708] Sleep (dwMilliseconds=0x3e8) [0201.710] Sleep (dwMilliseconds=0x3e8) [0201.712] Sleep (dwMilliseconds=0x3e8) [0201.714] Sleep (dwMilliseconds=0x3e8) [0201.716] Sleep (dwMilliseconds=0x3e8) [0201.718] Sleep (dwMilliseconds=0x3e8) [0201.720] Sleep (dwMilliseconds=0x3e8) [0201.722] Sleep (dwMilliseconds=0x3e8) [0201.731] Sleep (dwMilliseconds=0x3e8) [0201.737] Sleep (dwMilliseconds=0x3e8) [0201.739] Sleep (dwMilliseconds=0x3e8) [0201.742] Sleep (dwMilliseconds=0x3e8) [0201.743] Sleep (dwMilliseconds=0x3e8) [0201.746] Sleep (dwMilliseconds=0x3e8) [0201.747] Sleep (dwMilliseconds=0x3e8) [0201.752] Sleep (dwMilliseconds=0x3e8) [0201.754] Sleep (dwMilliseconds=0x3e8) [0201.756] Sleep (dwMilliseconds=0x3e8) [0201.759] Sleep (dwMilliseconds=0x3e8) [0201.760] Sleep (dwMilliseconds=0x3e8) [0201.762] Sleep (dwMilliseconds=0x3e8) [0201.765] Sleep (dwMilliseconds=0x3e8) [0201.767] Sleep (dwMilliseconds=0x3e8) [0201.769] Sleep (dwMilliseconds=0x3e8) [0201.771] Sleep (dwMilliseconds=0x3e8) [0201.773] Sleep (dwMilliseconds=0x3e8) [0201.775] Sleep (dwMilliseconds=0x3e8) [0201.777] Sleep (dwMilliseconds=0x3e8) [0201.779] Sleep (dwMilliseconds=0x3e8) [0201.781] Sleep (dwMilliseconds=0x3e8) [0201.783] Sleep (dwMilliseconds=0x3e8) [0201.785] Sleep (dwMilliseconds=0x3e8) [0201.788] Sleep (dwMilliseconds=0x3e8) [0201.792] Sleep (dwMilliseconds=0x3e8) [0201.796] Sleep (dwMilliseconds=0x3e8) [0201.799] Sleep (dwMilliseconds=0x3e8) [0201.801] Sleep (dwMilliseconds=0x3e8) [0201.805] Sleep (dwMilliseconds=0x3e8) [0201.807] Sleep (dwMilliseconds=0x3e8) [0201.809] Sleep (dwMilliseconds=0x3e8) [0201.811] Sleep (dwMilliseconds=0x3e8) [0201.813] Sleep (dwMilliseconds=0x3e8) [0201.815] Sleep (dwMilliseconds=0x3e8) [0201.817] Sleep (dwMilliseconds=0x3e8) [0201.819] Sleep (dwMilliseconds=0x3e8) [0201.821] Sleep (dwMilliseconds=0x3e8) [0201.823] Sleep (dwMilliseconds=0x3e8) [0201.825] Sleep (dwMilliseconds=0x3e8) [0201.827] Sleep (dwMilliseconds=0x3e8) [0201.829] Sleep (dwMilliseconds=0x3e8) [0201.831] Sleep (dwMilliseconds=0x3e8) [0201.833] Sleep (dwMilliseconds=0x3e8) [0201.835] Sleep (dwMilliseconds=0x3e8) [0201.837] Sleep (dwMilliseconds=0x3e8) [0201.844] Sleep (dwMilliseconds=0x3e8) [0201.851] Sleep (dwMilliseconds=0x3e8) [0201.853] Sleep (dwMilliseconds=0x3e8) [0201.855] Sleep (dwMilliseconds=0x3e8) [0201.857] Sleep (dwMilliseconds=0x3e8) [0201.860] Sleep (dwMilliseconds=0x3e8) [0201.862] Sleep (dwMilliseconds=0x3e8) [0201.864] Sleep (dwMilliseconds=0x3e8) [0201.866] Sleep (dwMilliseconds=0x3e8) [0201.868] Sleep (dwMilliseconds=0x3e8) [0201.870] Sleep (dwMilliseconds=0x3e8) [0201.872] Sleep (dwMilliseconds=0x3e8) [0201.874] Sleep (dwMilliseconds=0x3e8) [0201.876] Sleep (dwMilliseconds=0x3e8) [0201.879] Sleep (dwMilliseconds=0x3e8) [0201.881] Sleep (dwMilliseconds=0x3e8) [0201.884] Sleep (dwMilliseconds=0x3e8) [0201.886] Sleep (dwMilliseconds=0x3e8) [0201.888] Sleep (dwMilliseconds=0x3e8) [0201.891] Sleep (dwMilliseconds=0x3e8) [0201.909] Sleep (dwMilliseconds=0x3e8) [0201.911] Sleep (dwMilliseconds=0x3e8) [0201.913] Sleep (dwMilliseconds=0x3e8) [0201.932] Sleep (dwMilliseconds=0x3e8) [0201.934] Sleep (dwMilliseconds=0x3e8) [0201.936] Sleep (dwMilliseconds=0x3e8) [0201.938] Sleep (dwMilliseconds=0x3e8) [0201.940] Sleep (dwMilliseconds=0x3e8) [0201.944] Sleep (dwMilliseconds=0x3e8) [0201.945] Sleep (dwMilliseconds=0x3e8) [0201.947] Sleep (dwMilliseconds=0x3e8) [0201.949] Sleep (dwMilliseconds=0x3e8) [0201.952] Sleep (dwMilliseconds=0x3e8) [0201.954] Sleep (dwMilliseconds=0x3e8) [0201.956] Sleep (dwMilliseconds=0x3e8) [0201.964] Sleep (dwMilliseconds=0x3e8) [0201.968] Sleep (dwMilliseconds=0x3e8) [0201.971] Sleep (dwMilliseconds=0x3e8) [0201.973] Sleep (dwMilliseconds=0x3e8) [0201.975] Sleep (dwMilliseconds=0x3e8) [0201.977] Sleep (dwMilliseconds=0x3e8) [0201.979] Sleep (dwMilliseconds=0x3e8) [0201.981] Sleep (dwMilliseconds=0x3e8) [0201.985] Sleep (dwMilliseconds=0x3e8) [0201.987] Sleep (dwMilliseconds=0x3e8) [0201.988] Sleep (dwMilliseconds=0x3e8) [0201.990] Sleep (dwMilliseconds=0x3e8) [0201.992] Sleep (dwMilliseconds=0x3e8) [0201.995] Sleep (dwMilliseconds=0x3e8) [0202.009] Sleep (dwMilliseconds=0x3e8) [0202.011] Sleep (dwMilliseconds=0x3e8) [0202.014] Sleep (dwMilliseconds=0x3e8) [0202.015] Sleep (dwMilliseconds=0x3e8) [0202.017] Sleep (dwMilliseconds=0x3e8) [0202.020] Sleep (dwMilliseconds=0x3e8) [0202.033] Sleep (dwMilliseconds=0x3e8) [0202.035] Sleep (dwMilliseconds=0x3e8) [0202.037] Sleep (dwMilliseconds=0x3e8) [0202.039] Sleep (dwMilliseconds=0x3e8) [0202.041] Sleep (dwMilliseconds=0x3e8) [0202.049] Sleep (dwMilliseconds=0x3e8) [0202.054] Sleep (dwMilliseconds=0x3e8) [0202.056] Sleep (dwMilliseconds=0x3e8) [0202.058] Sleep (dwMilliseconds=0x3e8) [0202.060] Sleep (dwMilliseconds=0x3e8) [0202.062] Sleep (dwMilliseconds=0x3e8) [0202.064] Sleep (dwMilliseconds=0x3e8) [0202.066] Sleep (dwMilliseconds=0x3e8) [0202.068] Sleep (dwMilliseconds=0x3e8) [0202.070] Sleep (dwMilliseconds=0x3e8) [0202.072] Sleep (dwMilliseconds=0x3e8) [0202.091] Sleep (dwMilliseconds=0x3e8) [0202.093] Sleep (dwMilliseconds=0x3e8) [0202.095] Sleep (dwMilliseconds=0x3e8) [0202.097] Sleep (dwMilliseconds=0x3e8) [0202.099] Sleep (dwMilliseconds=0x3e8) [0202.101] Sleep (dwMilliseconds=0x3e8) [0202.103] Sleep (dwMilliseconds=0x3e8) [0202.105] Sleep (dwMilliseconds=0x3e8) [0202.112] Sleep (dwMilliseconds=0x3e8) [0202.114] Sleep (dwMilliseconds=0x3e8) [0202.116] Sleep (dwMilliseconds=0x3e8) [0202.118] Sleep (dwMilliseconds=0x3e8) [0202.120] Sleep (dwMilliseconds=0x3e8) [0202.122] Sleep (dwMilliseconds=0x3e8) [0202.124] Sleep (dwMilliseconds=0x3e8) [0202.126] Sleep (dwMilliseconds=0x3e8) [0202.130] Sleep (dwMilliseconds=0x3e8) [0202.131] Sleep (dwMilliseconds=0x3e8) [0202.150] Sleep (dwMilliseconds=0x3e8) [0202.152] Sleep (dwMilliseconds=0x3e8) [0202.154] Sleep (dwMilliseconds=0x3e8) [0202.159] Sleep (dwMilliseconds=0x3e8) [0202.162] Sleep (dwMilliseconds=0x3e8) [0202.164] Sleep (dwMilliseconds=0x3e8) [0202.166] Sleep (dwMilliseconds=0x3e8) [0202.168] Sleep (dwMilliseconds=0x3e8) [0202.187] Sleep (dwMilliseconds=0x3e8) [0202.189] Sleep (dwMilliseconds=0x3e8) [0202.191] Sleep (dwMilliseconds=0x3e8) [0202.193] Sleep (dwMilliseconds=0x3e8) [0202.195] Sleep (dwMilliseconds=0x3e8) [0202.198] Sleep (dwMilliseconds=0x3e8) [0202.200] Sleep (dwMilliseconds=0x3e8) [0202.202] Sleep (dwMilliseconds=0x3e8) [0202.204] Sleep (dwMilliseconds=0x3e8) [0202.206] Sleep (dwMilliseconds=0x3e8) [0202.210] Sleep (dwMilliseconds=0x3e8) [0202.211] Sleep (dwMilliseconds=0x3e8) [0202.213] Sleep (dwMilliseconds=0x3e8) [0202.215] Sleep (dwMilliseconds=0x3e8) [0202.217] Sleep (dwMilliseconds=0x3e8) [0202.219] Sleep (dwMilliseconds=0x3e8) [0202.221] Sleep (dwMilliseconds=0x3e8) [0202.223] Sleep (dwMilliseconds=0x3e8) [0202.226] Sleep (dwMilliseconds=0x3e8) [0202.227] Sleep (dwMilliseconds=0x3e8) [0202.229] Sleep (dwMilliseconds=0x3e8) [0202.232] Sleep (dwMilliseconds=0x3e8) [0202.233] Sleep (dwMilliseconds=0x3e8) [0202.235] Sleep (dwMilliseconds=0x3e8) [0202.237] Sleep (dwMilliseconds=0x3e8) [0202.239] Sleep (dwMilliseconds=0x3e8) [0202.242] Sleep (dwMilliseconds=0x3e8) [0202.244] Sleep (dwMilliseconds=0x3e8) [0202.246] Sleep (dwMilliseconds=0x3e8) [0202.248] Sleep (dwMilliseconds=0x3e8) [0202.250] Sleep (dwMilliseconds=0x3e8) [0202.252] Sleep (dwMilliseconds=0x3e8) [0202.254] Sleep (dwMilliseconds=0x3e8) [0202.256] Sleep (dwMilliseconds=0x3e8) [0202.275] Sleep (dwMilliseconds=0x3e8) [0202.277] Sleep (dwMilliseconds=0x3e8) [0202.279] Sleep (dwMilliseconds=0x3e8) [0202.281] Sleep (dwMilliseconds=0x3e8) [0202.283] Sleep (dwMilliseconds=0x3e8) [0202.285] Sleep (dwMilliseconds=0x3e8) [0202.287] Sleep (dwMilliseconds=0x3e8) [0202.289] Sleep (dwMilliseconds=0x3e8) [0202.291] Sleep (dwMilliseconds=0x3e8) [0202.293] Sleep (dwMilliseconds=0x3e8) [0202.295] Sleep (dwMilliseconds=0x3e8) [0202.297] Sleep (dwMilliseconds=0x3e8) [0202.301] Sleep (dwMilliseconds=0x3e8) [0202.303] Sleep (dwMilliseconds=0x3e8) [0202.306] Sleep (dwMilliseconds=0x3e8) [0202.308] Sleep (dwMilliseconds=0x3e8) [0202.310] Sleep (dwMilliseconds=0x3e8) [0202.312] Sleep (dwMilliseconds=0x3e8) [0202.314] Sleep (dwMilliseconds=0x3e8) [0202.328] Sleep (dwMilliseconds=0x3e8) [0202.330] Sleep (dwMilliseconds=0x3e8) [0202.332] Sleep (dwMilliseconds=0x3e8) [0202.334] Sleep (dwMilliseconds=0x3e8) [0202.337] Sleep (dwMilliseconds=0x3e8) [0202.339] Sleep (dwMilliseconds=0x3e8) [0202.341] Sleep (dwMilliseconds=0x3e8) [0202.358] Sleep (dwMilliseconds=0x3e8) [0202.360] Sleep (dwMilliseconds=0x3e8) [0202.362] Sleep (dwMilliseconds=0x3e8) [0202.364] Sleep (dwMilliseconds=0x3e8) [0202.366] Sleep (dwMilliseconds=0x3e8) [0202.368] Sleep (dwMilliseconds=0x3e8) [0202.370] Sleep (dwMilliseconds=0x3e8) [0202.374] Sleep (dwMilliseconds=0x3e8) [0202.376] Sleep (dwMilliseconds=0x3e8) [0202.378] Sleep (dwMilliseconds=0x3e8) [0202.380] Sleep (dwMilliseconds=0x3e8) [0202.382] Sleep (dwMilliseconds=0x3e8) [0202.384] Sleep (dwMilliseconds=0x3e8) [0202.387] Sleep (dwMilliseconds=0x3e8) [0202.401] Sleep (dwMilliseconds=0x3e8) [0202.403] Sleep (dwMilliseconds=0x3e8) [0202.405] Sleep (dwMilliseconds=0x3e8) [0202.408] Sleep (dwMilliseconds=0x3e8) [0202.409] Sleep (dwMilliseconds=0x3e8) [0202.412] Sleep (dwMilliseconds=0x3e8) [0202.414] Sleep (dwMilliseconds=0x3e8) [0202.416] Sleep (dwMilliseconds=0x3e8) [0202.419] Sleep (dwMilliseconds=0x3e8) [0202.420] Sleep (dwMilliseconds=0x3e8) [0202.422] Sleep (dwMilliseconds=0x3e8) [0202.424] Sleep (dwMilliseconds=0x3e8) [0202.426] Sleep (dwMilliseconds=0x3e8) [0202.428] Sleep (dwMilliseconds=0x3e8) [0202.430] Sleep (dwMilliseconds=0x3e8) [0202.447] Sleep (dwMilliseconds=0x3e8) [0202.448] Sleep (dwMilliseconds=0x3e8) [0202.451] Sleep (dwMilliseconds=0x3e8) [0202.467] Sleep (dwMilliseconds=0x3e8) [0202.469] Sleep (dwMilliseconds=0x3e8) [0202.471] Sleep (dwMilliseconds=0x3e8) [0202.473] Sleep (dwMilliseconds=0x3e8) [0202.475] Sleep (dwMilliseconds=0x3e8) [0202.477] Sleep (dwMilliseconds=0x3e8) [0202.479] Sleep (dwMilliseconds=0x3e8) [0202.482] Sleep (dwMilliseconds=0x3e8) [0202.484] Sleep (dwMilliseconds=0x3e8) [0202.486] Sleep (dwMilliseconds=0x3e8) [0202.488] Sleep (dwMilliseconds=0x3e8) [0202.491] Sleep (dwMilliseconds=0x3e8) [0202.493] Sleep (dwMilliseconds=0x3e8) [0202.495] Sleep (dwMilliseconds=0x3e8) [0202.498] Sleep (dwMilliseconds=0x3e8) [0202.513] Sleep (dwMilliseconds=0x3e8) [0202.515] Sleep (dwMilliseconds=0x3e8) [0202.517] Sleep (dwMilliseconds=0x3e8) [0202.519] Sleep (dwMilliseconds=0x3e8) [0202.521] Sleep (dwMilliseconds=0x3e8) [0202.523] Sleep (dwMilliseconds=0x3e8) [0202.525] Sleep (dwMilliseconds=0x3e8) [0202.527] Sleep (dwMilliseconds=0x3e8) [0202.533] Sleep (dwMilliseconds=0x3e8) [0202.535] Sleep (dwMilliseconds=0x3e8) [0202.537] Sleep (dwMilliseconds=0x3e8) [0202.555] Sleep (dwMilliseconds=0x3e8) [0202.558] Sleep (dwMilliseconds=0x3e8) [0202.560] Sleep (dwMilliseconds=0x3e8) [0202.562] Sleep (dwMilliseconds=0x3e8) [0202.564] Sleep (dwMilliseconds=0x3e8) [0202.566] Sleep (dwMilliseconds=0x3e8) [0202.568] Sleep (dwMilliseconds=0x3e8) [0202.588] Sleep (dwMilliseconds=0x3e8) [0202.603] Sleep (dwMilliseconds=0x3e8) [0202.605] Sleep (dwMilliseconds=0x3e8) [0202.610] Sleep (dwMilliseconds=0x3e8) [0202.614] Sleep (dwMilliseconds=0x3e8) [0202.615] Sleep (dwMilliseconds=0x3e8) [0202.621] Sleep (dwMilliseconds=0x3e8) [0202.623] Sleep (dwMilliseconds=0x3e8) [0202.629] Sleep (dwMilliseconds=0x3e8) [0202.659] Sleep (dwMilliseconds=0x3e8) [0202.661] Sleep (dwMilliseconds=0x3e8) [0202.663] Sleep (dwMilliseconds=0x3e8) [0202.667] Sleep (dwMilliseconds=0x3e8) [0202.669] Sleep (dwMilliseconds=0x3e8) [0202.671] Sleep (dwMilliseconds=0x3e8) [0202.673] Sleep (dwMilliseconds=0x3e8) [0202.675] Sleep (dwMilliseconds=0x3e8) [0202.677] Sleep (dwMilliseconds=0x3e8) [0202.679] Sleep (dwMilliseconds=0x3e8) [0202.683] Sleep (dwMilliseconds=0x3e8) [0202.685] Sleep (dwMilliseconds=0x3e8) [0202.687] Sleep (dwMilliseconds=0x3e8) [0202.689] Sleep (dwMilliseconds=0x3e8) [0202.691] Sleep (dwMilliseconds=0x3e8) [0202.693] Sleep (dwMilliseconds=0x3e8) [0202.695] Sleep (dwMilliseconds=0x3e8) [0202.697] Sleep (dwMilliseconds=0x3e8) [0202.699] Sleep (dwMilliseconds=0x3e8) [0202.701] Sleep (dwMilliseconds=0x3e8) [0202.703] Sleep (dwMilliseconds=0x3e8) [0202.705] Sleep (dwMilliseconds=0x3e8) [0202.707] Sleep (dwMilliseconds=0x3e8) [0202.710] Sleep (dwMilliseconds=0x3e8) [0202.713] Sleep (dwMilliseconds=0x3e8) [0202.715] Sleep (dwMilliseconds=0x3e8) [0202.717] Sleep (dwMilliseconds=0x3e8) [0202.719] Sleep (dwMilliseconds=0x3e8) [0202.721] Sleep (dwMilliseconds=0x3e8) [0202.723] Sleep (dwMilliseconds=0x3e8) [0202.725] Sleep (dwMilliseconds=0x3e8) [0202.789] Sleep (dwMilliseconds=0x3e8) [0202.790] Sleep (dwMilliseconds=0x3e8) [0202.792] Sleep (dwMilliseconds=0x3e8) [0202.794] Sleep (dwMilliseconds=0x3e8) [0202.796] Sleep (dwMilliseconds=0x3e8) [0202.798] Sleep (dwMilliseconds=0x3e8) [0202.800] Sleep (dwMilliseconds=0x3e8) [0202.802] Sleep (dwMilliseconds=0x3e8) [0202.804] Sleep (dwMilliseconds=0x3e8) [0202.805] Sleep (dwMilliseconds=0x3e8) [0202.823] Sleep (dwMilliseconds=0x3e8) [0202.825] Sleep (dwMilliseconds=0x3e8) [0202.827] Sleep (dwMilliseconds=0x3e8) [0202.829] Sleep (dwMilliseconds=0x3e8) [0202.831] Sleep (dwMilliseconds=0x3e8) [0202.833] Sleep (dwMilliseconds=0x3e8) [0202.836] Sleep (dwMilliseconds=0x3e8) [0202.838] Sleep (dwMilliseconds=0x3e8) [0202.840] Sleep (dwMilliseconds=0x3e8) [0202.842] Sleep (dwMilliseconds=0x3e8) [0202.844] Sleep (dwMilliseconds=0x3e8) [0202.846] Sleep (dwMilliseconds=0x3e8) [0202.863] Sleep (dwMilliseconds=0x3e8) [0202.864] Sleep (dwMilliseconds=0x3e8) [0202.866] Sleep (dwMilliseconds=0x3e8) [0202.868] Sleep (dwMilliseconds=0x3e8) [0202.869] Sleep (dwMilliseconds=0x3e8) [0202.871] Sleep (dwMilliseconds=0x3e8) [0202.874] Sleep (dwMilliseconds=0x3e8) [0202.875] Sleep (dwMilliseconds=0x3e8) [0202.877] Sleep (dwMilliseconds=0x3e8) [0202.879] Sleep (dwMilliseconds=0x3e8) [0202.881] Sleep (dwMilliseconds=0x3e8) [0202.883] Sleep (dwMilliseconds=0x3e8) [0202.888] Sleep (dwMilliseconds=0x3e8) [0202.890] Sleep (dwMilliseconds=0x3e8) [0202.892] Sleep (dwMilliseconds=0x3e8) [0202.906] Sleep (dwMilliseconds=0x3e8) [0202.908] Sleep (dwMilliseconds=0x3e8) [0202.910] Sleep (dwMilliseconds=0x3e8) [0202.912] Sleep (dwMilliseconds=0x3e8) [0202.915] Sleep (dwMilliseconds=0x3e8) [0202.926] Sleep (dwMilliseconds=0x3e8) [0202.927] Sleep (dwMilliseconds=0x3e8) [0202.929] Sleep (dwMilliseconds=0x3e8) [0202.930] Sleep (dwMilliseconds=0x3e8) [0202.931] Sleep (dwMilliseconds=0x3e8) [0202.933] Sleep (dwMilliseconds=0x3e8) [0202.935] Sleep (dwMilliseconds=0x3e8) [0202.937] Sleep (dwMilliseconds=0x3e8) [0202.939] Sleep (dwMilliseconds=0x3e8) [0202.941] Sleep (dwMilliseconds=0x3e8) [0202.943] Sleep (dwMilliseconds=0x3e8) [0202.945] Sleep (dwMilliseconds=0x3e8) [0202.961] Sleep (dwMilliseconds=0x3e8) [0202.963] Sleep (dwMilliseconds=0x3e8) [0202.965] Sleep (dwMilliseconds=0x3e8) [0202.967] Sleep (dwMilliseconds=0x3e8) [0202.969] Sleep (dwMilliseconds=0x3e8) [0202.971] Sleep (dwMilliseconds=0x3e8) [0202.973] Sleep (dwMilliseconds=0x3e8) [0202.975] Sleep (dwMilliseconds=0x3e8) [0202.977] Sleep (dwMilliseconds=0x3e8) [0202.979] Sleep (dwMilliseconds=0x3e8) [0202.981] Sleep (dwMilliseconds=0x3e8) [0202.984] Sleep (dwMilliseconds=0x3e8) [0202.986] Sleep (dwMilliseconds=0x3e8) [0202.988] Sleep (dwMilliseconds=0x3e8) [0202.992] Sleep (dwMilliseconds=0x3e8) [0202.993] Sleep (dwMilliseconds=0x3e8) [0203.008] Sleep (dwMilliseconds=0x3e8) [0203.011] Sleep (dwMilliseconds=0x3e8) [0203.013] Sleep (dwMilliseconds=0x3e8) [0203.015] Sleep (dwMilliseconds=0x3e8) [0203.017] Sleep (dwMilliseconds=0x3e8) [0203.019] Sleep (dwMilliseconds=0x3e8) [0203.023] Sleep (dwMilliseconds=0x3e8) [0203.025] Sleep (dwMilliseconds=0x3e8) [0203.027] Sleep (dwMilliseconds=0x3e8) [0203.029] Sleep (dwMilliseconds=0x3e8) [0203.031] Sleep (dwMilliseconds=0x3e8) [0203.033] Sleep (dwMilliseconds=0x3e8) [0203.036] Sleep (dwMilliseconds=0x3e8) [0203.037] Sleep (dwMilliseconds=0x3e8) [0203.039] Sleep (dwMilliseconds=0x3e8) [0203.041] Sleep (dwMilliseconds=0x3e8) [0203.043] Sleep (dwMilliseconds=0x3e8) [0203.045] Sleep (dwMilliseconds=0x3e8) [0203.063] Sleep (dwMilliseconds=0x3e8) [0203.065] Sleep (dwMilliseconds=0x3e8) [0203.067] Sleep (dwMilliseconds=0x3e8) [0203.069] Sleep (dwMilliseconds=0x3e8) [0203.071] Sleep (dwMilliseconds=0x3e8) [0203.093] Sleep (dwMilliseconds=0x3e8) [0203.095] Sleep (dwMilliseconds=0x3e8) [0203.097] Sleep (dwMilliseconds=0x3e8) [0203.099] Sleep (dwMilliseconds=0x3e8) [0203.101] Sleep (dwMilliseconds=0x3e8) [0203.104] Sleep (dwMilliseconds=0x3e8) [0203.106] Sleep (dwMilliseconds=0x3e8) [0203.108] Sleep (dwMilliseconds=0x3e8) [0203.110] Sleep (dwMilliseconds=0x3e8) [0203.112] Sleep (dwMilliseconds=0x3e8) [0203.114] Sleep (dwMilliseconds=0x3e8) [0203.116] Sleep (dwMilliseconds=0x3e8) [0203.123] Sleep (dwMilliseconds=0x3e8) [0203.124] Sleep (dwMilliseconds=0x3e8) [0203.126] Sleep (dwMilliseconds=0x3e8) [0203.128] Sleep (dwMilliseconds=0x3e8) [0203.130] Sleep (dwMilliseconds=0x3e8) [0203.132] Sleep (dwMilliseconds=0x3e8) [0203.134] Sleep (dwMilliseconds=0x3e8) [0203.137] Sleep (dwMilliseconds=0x3e8) [0203.139] Sleep (dwMilliseconds=0x3e8) [0203.141] Sleep (dwMilliseconds=0x3e8) [0203.143] Sleep (dwMilliseconds=0x3e8) [0203.145] Sleep (dwMilliseconds=0x3e8) [0203.147] Sleep (dwMilliseconds=0x3e8) [0203.150] Sleep (dwMilliseconds=0x3e8) [0203.152] Sleep (dwMilliseconds=0x3e8) [0203.153] Sleep (dwMilliseconds=0x3e8) [0203.155] Sleep (dwMilliseconds=0x3e8) [0203.157] Sleep (dwMilliseconds=0x3e8) [0203.159] Sleep (dwMilliseconds=0x3e8) [0203.161] Sleep (dwMilliseconds=0x3e8) [0203.163] Sleep (dwMilliseconds=0x3e8) [0203.165] Sleep (dwMilliseconds=0x3e8) [0203.167] Sleep (dwMilliseconds=0x3e8) [0203.169] Sleep (dwMilliseconds=0x3e8) [0203.171] Sleep (dwMilliseconds=0x3e8) [0203.173] Sleep (dwMilliseconds=0x3e8) [0203.175] Sleep (dwMilliseconds=0x3e8) [0203.178] Sleep (dwMilliseconds=0x3e8) [0203.181] Sleep (dwMilliseconds=0x3e8) [0203.182] Sleep (dwMilliseconds=0x3e8) [0203.184] Sleep (dwMilliseconds=0x3e8) [0203.186] Sleep (dwMilliseconds=0x3e8) [0203.188] Sleep (dwMilliseconds=0x3e8) [0203.190] Sleep (dwMilliseconds=0x3e8) [0203.191] Sleep (dwMilliseconds=0x3e8) [0203.193] Sleep (dwMilliseconds=0x3e8) [0203.195] Sleep (dwMilliseconds=0x3e8) [0203.197] Sleep (dwMilliseconds=0x3e8) [0203.199] Sleep (dwMilliseconds=0x3e8) [0203.201] Sleep (dwMilliseconds=0x3e8) [0203.203] Sleep (dwMilliseconds=0x3e8) [0203.205] Sleep (dwMilliseconds=0x3e8) [0203.207] Sleep (dwMilliseconds=0x3e8) [0203.209] Sleep (dwMilliseconds=0x3e8) [0203.216] Sleep (dwMilliseconds=0x3e8) [0203.217] Sleep (dwMilliseconds=0x3e8) [0203.219] Sleep (dwMilliseconds=0x3e8) [0203.222] Sleep (dwMilliseconds=0x3e8) [0203.224] Sleep (dwMilliseconds=0x3e8) [0203.226] Sleep (dwMilliseconds=0x3e8) [0203.228] Sleep (dwMilliseconds=0x3e8) [0203.230] Sleep (dwMilliseconds=0x3e8) [0203.232] Sleep (dwMilliseconds=0x3e8) [0203.234] Sleep (dwMilliseconds=0x3e8) [0203.236] Sleep (dwMilliseconds=0x3e8) [0203.238] Sleep (dwMilliseconds=0x3e8) [0203.240] Sleep (dwMilliseconds=0x3e8) [0203.242] Sleep (dwMilliseconds=0x3e8) [0203.244] Sleep (dwMilliseconds=0x3e8) [0203.247] Sleep (dwMilliseconds=0x3e8) [0203.249] Sleep (dwMilliseconds=0x3e8) [0203.251] Sleep (dwMilliseconds=0x3e8) [0203.253] Sleep (dwMilliseconds=0x3e8) [0203.255] Sleep (dwMilliseconds=0x3e8) [0203.257] Sleep (dwMilliseconds=0x3e8) [0203.259] Sleep (dwMilliseconds=0x3e8) [0203.261] Sleep (dwMilliseconds=0x3e8) [0203.263] Sleep (dwMilliseconds=0x3e8) [0203.265] Sleep (dwMilliseconds=0x3e8) [0203.268] Sleep (dwMilliseconds=0x3e8) [0203.270] Sleep (dwMilliseconds=0x3e8) [0203.272] Sleep (dwMilliseconds=0x3e8) [0203.274] Sleep (dwMilliseconds=0x3e8) [0203.276] Sleep (dwMilliseconds=0x3e8) [0203.278] Sleep (dwMilliseconds=0x3e8) [0203.281] Sleep (dwMilliseconds=0x3e8) [0203.283] Sleep (dwMilliseconds=0x3e8) [0203.285] Sleep (dwMilliseconds=0x3e8) [0203.288] Sleep (dwMilliseconds=0x3e8) [0203.289] Sleep (dwMilliseconds=0x3e8) [0203.291] Sleep (dwMilliseconds=0x3e8) [0203.293] Sleep (dwMilliseconds=0x3e8) [0203.295] Sleep (dwMilliseconds=0x3e8) [0203.297] Sleep (dwMilliseconds=0x3e8) [0203.299] Sleep (dwMilliseconds=0x3e8) [0203.301] Sleep (dwMilliseconds=0x3e8) [0203.303] Sleep (dwMilliseconds=0x3e8) [0203.305] Sleep (dwMilliseconds=0x3e8) [0203.307] Sleep (dwMilliseconds=0x3e8) [0203.309] Sleep (dwMilliseconds=0x3e8) [0203.311] Sleep (dwMilliseconds=0x3e8) [0203.315] Sleep (dwMilliseconds=0x3e8) [0203.316] Sleep (dwMilliseconds=0x3e8) [0203.318] Sleep (dwMilliseconds=0x3e8) [0203.320] Sleep (dwMilliseconds=0x3e8) [0203.323] Sleep (dwMilliseconds=0x3e8) [0203.325] Sleep (dwMilliseconds=0x3e8) [0203.326] Sleep (dwMilliseconds=0x3e8) [0203.328] Sleep (dwMilliseconds=0x3e8) [0203.330] Sleep (dwMilliseconds=0x3e8) [0203.333] Sleep (dwMilliseconds=0x3e8) [0203.334] Sleep (dwMilliseconds=0x3e8) [0203.336] Sleep (dwMilliseconds=0x3e8) [0203.339] Sleep (dwMilliseconds=0x3e8) [0203.341] Sleep (dwMilliseconds=0x3e8) [0203.343] Sleep (dwMilliseconds=0x3e8) [0203.345] Sleep (dwMilliseconds=0x3e8) [0203.349] Sleep (dwMilliseconds=0x3e8) [0203.351] Sleep (dwMilliseconds=0x3e8) [0203.353] Sleep (dwMilliseconds=0x3e8) [0203.355] Sleep (dwMilliseconds=0x3e8) [0203.357] Sleep (dwMilliseconds=0x3e8) [0203.359] Sleep (dwMilliseconds=0x3e8) [0203.361] Sleep (dwMilliseconds=0x3e8) [0203.363] Sleep (dwMilliseconds=0x3e8) [0203.365] Sleep (dwMilliseconds=0x3e8) [0203.367] Sleep (dwMilliseconds=0x3e8) [0203.369] Sleep (dwMilliseconds=0x3e8) [0203.371] Sleep (dwMilliseconds=0x3e8) [0203.373] Sleep (dwMilliseconds=0x3e8) [0203.375] Sleep (dwMilliseconds=0x3e8) [0203.380] Sleep (dwMilliseconds=0x3e8) [0203.382] Sleep (dwMilliseconds=0x3e8) [0203.384] Sleep (dwMilliseconds=0x3e8) [0203.386] Sleep (dwMilliseconds=0x3e8) [0203.390] Sleep (dwMilliseconds=0x3e8) [0203.392] Sleep (dwMilliseconds=0x3e8) [0203.394] Sleep (dwMilliseconds=0x3e8) [0203.396] Sleep (dwMilliseconds=0x3e8) [0203.398] Sleep (dwMilliseconds=0x3e8) [0203.400] Sleep (dwMilliseconds=0x3e8) [0203.402] Sleep (dwMilliseconds=0x3e8) [0203.404] Sleep (dwMilliseconds=0x3e8) [0203.406] Sleep (dwMilliseconds=0x3e8) [0203.408] Sleep (dwMilliseconds=0x3e8) [0203.410] Sleep (dwMilliseconds=0x3e8) [0203.414] Sleep (dwMilliseconds=0x3e8) [0203.450] Sleep (dwMilliseconds=0x3e8) [0203.452] Sleep (dwMilliseconds=0x3e8) [0203.456] Sleep (dwMilliseconds=0x3e8) [0203.457] Sleep (dwMilliseconds=0x3e8) [0203.459] Sleep (dwMilliseconds=0x3e8) [0203.463] Sleep (dwMilliseconds=0x3e8) [0203.467] Sleep (dwMilliseconds=0x3e8) [0203.469] Sleep (dwMilliseconds=0x3e8) [0203.471] Sleep (dwMilliseconds=0x3e8) [0203.473] Sleep (dwMilliseconds=0x3e8) [0203.475] Sleep (dwMilliseconds=0x3e8) [0203.478] Sleep (dwMilliseconds=0x3e8) [0203.479] Sleep (dwMilliseconds=0x3e8) [0203.481] Sleep (dwMilliseconds=0x3e8) [0203.483] Sleep (dwMilliseconds=0x3e8) [0203.485] Sleep (dwMilliseconds=0x3e8) [0203.487] Sleep (dwMilliseconds=0x3e8) [0203.489] Sleep (dwMilliseconds=0x3e8) [0203.491] Sleep (dwMilliseconds=0x3e8) [0203.493] Sleep (dwMilliseconds=0x3e8) [0203.495] Sleep (dwMilliseconds=0x3e8) [0203.497] Sleep (dwMilliseconds=0x3e8) [0203.499] Sleep (dwMilliseconds=0x3e8) [0203.501] Sleep (dwMilliseconds=0x3e8) [0203.503] Sleep (dwMilliseconds=0x3e8) [0203.507] Sleep (dwMilliseconds=0x3e8) [0203.509] Sleep (dwMilliseconds=0x3e8) [0203.511] Sleep (dwMilliseconds=0x3e8) [0203.513] Sleep (dwMilliseconds=0x3e8) [0203.515] Sleep (dwMilliseconds=0x3e8) [0203.517] Sleep (dwMilliseconds=0x3e8) [0203.519] Sleep (dwMilliseconds=0x3e8) [0203.521] Sleep (dwMilliseconds=0x3e8) [0203.523] Sleep (dwMilliseconds=0x3e8) [0203.525] Sleep (dwMilliseconds=0x3e8) [0203.527] Sleep (dwMilliseconds=0x3e8) [0203.529] Sleep (dwMilliseconds=0x3e8) [0203.531] Sleep (dwMilliseconds=0x3e8) [0203.533] Sleep (dwMilliseconds=0x3e8) [0203.535] Sleep (dwMilliseconds=0x3e8) [0203.537] Sleep (dwMilliseconds=0x3e8) [0203.539] Sleep (dwMilliseconds=0x3e8) [0203.541] Sleep (dwMilliseconds=0x3e8) [0203.543] Sleep (dwMilliseconds=0x3e8) [0203.546] Sleep (dwMilliseconds=0x3e8) [0203.549] Sleep (dwMilliseconds=0x3e8) [0203.551] Sleep (dwMilliseconds=0x3e8) [0203.553] Sleep (dwMilliseconds=0x3e8) [0203.555] Sleep (dwMilliseconds=0x3e8) [0203.557] Sleep (dwMilliseconds=0x3e8) [0203.559] Sleep (dwMilliseconds=0x3e8) [0203.561] Sleep (dwMilliseconds=0x3e8) [0203.563] Sleep (dwMilliseconds=0x3e8) [0203.565] Sleep (dwMilliseconds=0x3e8) [0203.567] Sleep (dwMilliseconds=0x3e8) [0203.569] Sleep (dwMilliseconds=0x3e8) [0203.571] Sleep (dwMilliseconds=0x3e8) [0203.573] Sleep (dwMilliseconds=0x3e8) [0203.575] Sleep (dwMilliseconds=0x3e8) [0203.577] Sleep (dwMilliseconds=0x3e8) [0203.579] Sleep (dwMilliseconds=0x3e8) [0203.581] Sleep (dwMilliseconds=0x3e8) [0203.583] Sleep (dwMilliseconds=0x3e8) [0203.585] Sleep (dwMilliseconds=0x3e8) [0203.587] Sleep (dwMilliseconds=0x3e8) [0203.598] Sleep (dwMilliseconds=0x3e8) [0203.600] Sleep (dwMilliseconds=0x3e8) [0203.602] Sleep (dwMilliseconds=0x3e8) [0203.604] Sleep (dwMilliseconds=0x3e8) [0203.623] Sleep (dwMilliseconds=0x3e8) [0203.624] Sleep (dwMilliseconds=0x3e8) [0203.626] Sleep (dwMilliseconds=0x3e8) [0203.629] Sleep (dwMilliseconds=0x3e8) [0203.635] Sleep (dwMilliseconds=0x3e8) [0203.655] Sleep (dwMilliseconds=0x3e8) [0203.656] Sleep (dwMilliseconds=0x3e8) [0203.658] Sleep (dwMilliseconds=0x3e8) [0203.660] Sleep (dwMilliseconds=0x3e8) [0203.662] Sleep (dwMilliseconds=0x3e8) [0203.664] Sleep (dwMilliseconds=0x3e8) [0203.666] Sleep (dwMilliseconds=0x3e8) [0203.670] Sleep (dwMilliseconds=0x3e8) [0203.671] Sleep (dwMilliseconds=0x3e8) [0203.673] Sleep (dwMilliseconds=0x3e8) [0203.675] Sleep (dwMilliseconds=0x3e8) [0203.677] Sleep (dwMilliseconds=0x3e8) [0203.679] Sleep (dwMilliseconds=0x3e8) [0203.681] Sleep (dwMilliseconds=0x3e8) [0203.683] Sleep (dwMilliseconds=0x3e8) [0203.686] Sleep (dwMilliseconds=0x3e8) [0203.688] Sleep (dwMilliseconds=0x3e8) [0203.690] Sleep (dwMilliseconds=0x3e8) [0203.692] Sleep (dwMilliseconds=0x3e8) [0203.693] Sleep (dwMilliseconds=0x3e8) [0203.695] Sleep (dwMilliseconds=0x3e8) [0203.697] Sleep (dwMilliseconds=0x3e8) [0203.699] Sleep (dwMilliseconds=0x3e8) [0203.701] Sleep (dwMilliseconds=0x3e8) [0203.703] Sleep (dwMilliseconds=0x3e8) [0203.705] Sleep (dwMilliseconds=0x3e8) [0203.723] Sleep (dwMilliseconds=0x3e8) [0203.725] Sleep (dwMilliseconds=0x3e8) [0203.727] Sleep (dwMilliseconds=0x3e8) [0203.729] Sleep (dwMilliseconds=0x3e8) [0203.731] Sleep (dwMilliseconds=0x3e8) [0203.732] Sleep (dwMilliseconds=0x3e8) [0203.734] Sleep (dwMilliseconds=0x3e8) [0203.736] Sleep (dwMilliseconds=0x3e8) [0203.738] Sleep (dwMilliseconds=0x3e8) [0203.740] Sleep (dwMilliseconds=0x3e8) [0203.742] Sleep (dwMilliseconds=0x3e8) [0203.744] Sleep (dwMilliseconds=0x3e8) [0203.745] Sleep (dwMilliseconds=0x3e8) [0203.747] Sleep (dwMilliseconds=0x3e8) [0203.751] Sleep (dwMilliseconds=0x3e8) [0203.753] Sleep (dwMilliseconds=0x3e8) [0203.755] Sleep (dwMilliseconds=0x3e8) [0203.757] Sleep (dwMilliseconds=0x3e8) [0203.759] Sleep (dwMilliseconds=0x3e8) [0203.761] Sleep (dwMilliseconds=0x3e8) [0203.763] Sleep (dwMilliseconds=0x3e8) [0203.767] Sleep (dwMilliseconds=0x3e8) [0203.768] Sleep (dwMilliseconds=0x3e8) [0203.770] Sleep (dwMilliseconds=0x3e8) [0203.772] Sleep (dwMilliseconds=0x3e8) [0203.791] Sleep (dwMilliseconds=0x3e8) [0203.793] Sleep (dwMilliseconds=0x3e8) [0203.795] Sleep (dwMilliseconds=0x3e8) [0203.797] Sleep (dwMilliseconds=0x3e8) [0203.799] Sleep (dwMilliseconds=0x3e8) [0203.801] Sleep (dwMilliseconds=0x3e8) [0203.803] Sleep (dwMilliseconds=0x3e8) [0203.805] Sleep (dwMilliseconds=0x3e8) [0203.808] Sleep (dwMilliseconds=0x3e8) [0203.810] Sleep (dwMilliseconds=0x3e8) [0203.812] Sleep (dwMilliseconds=0x3e8) [0203.815] Sleep (dwMilliseconds=0x3e8) [0203.817] Sleep (dwMilliseconds=0x3e8) [0203.819] Sleep (dwMilliseconds=0x3e8) [0203.821] Sleep (dwMilliseconds=0x3e8) [0203.823] Sleep (dwMilliseconds=0x3e8) [0203.826] Sleep (dwMilliseconds=0x3e8) [0203.830] Sleep (dwMilliseconds=0x3e8) [0203.831] Sleep (dwMilliseconds=0x3e8) [0203.833] Sleep (dwMilliseconds=0x3e8) [0203.835] Sleep (dwMilliseconds=0x3e8) [0203.837] Sleep (dwMilliseconds=0x3e8) [0203.839] Sleep (dwMilliseconds=0x3e8) [0203.841] Sleep (dwMilliseconds=0x3e8) [0203.843] Sleep (dwMilliseconds=0x3e8) [0203.846] Sleep (dwMilliseconds=0x3e8) [0203.848] Sleep (dwMilliseconds=0x3e8) [0203.850] Sleep (dwMilliseconds=0x3e8) [0203.852] Sleep (dwMilliseconds=0x3e8) [0203.854] Sleep (dwMilliseconds=0x3e8) [0203.856] Sleep (dwMilliseconds=0x3e8) [0203.858] Sleep (dwMilliseconds=0x3e8) [0203.860] Sleep (dwMilliseconds=0x3e8) [0203.862] Sleep (dwMilliseconds=0x3e8) [0203.864] Sleep (dwMilliseconds=0x3e8) [0203.867] Sleep (dwMilliseconds=0x3e8) [0203.869] Sleep (dwMilliseconds=0x3e8) [0203.870] Sleep (dwMilliseconds=0x3e8) [0203.872] Sleep (dwMilliseconds=0x3e8) [0203.874] Sleep (dwMilliseconds=0x3e8) [0203.876] Sleep (dwMilliseconds=0x3e8) [0203.878] Sleep (dwMilliseconds=0x3e8) [0203.880] Sleep (dwMilliseconds=0x3e8) [0203.882] Sleep (dwMilliseconds=0x3e8) [0203.884] Sleep (dwMilliseconds=0x3e8) [0203.889] Sleep (dwMilliseconds=0x3e8) [0203.891] Sleep (dwMilliseconds=0x3e8) [0203.916] Sleep (dwMilliseconds=0x3e8) [0203.917] Sleep (dwMilliseconds=0x3e8) [0203.919] Sleep (dwMilliseconds=0x3e8) [0203.921] Sleep (dwMilliseconds=0x3e8) [0203.923] Sleep (dwMilliseconds=0x3e8) [0203.925] Sleep (dwMilliseconds=0x3e8) [0203.927] Sleep (dwMilliseconds=0x3e8) [0203.928] Sleep (dwMilliseconds=0x3e8) [0203.930] Sleep (dwMilliseconds=0x3e8) [0203.932] Sleep (dwMilliseconds=0x3e8) [0203.934] Sleep (dwMilliseconds=0x3e8) [0203.935] Sleep (dwMilliseconds=0x3e8) [0203.937] Sleep (dwMilliseconds=0x3e8) [0203.939] Sleep (dwMilliseconds=0x3e8) [0203.941] Sleep (dwMilliseconds=0x3e8) [0203.943] Sleep (dwMilliseconds=0x3e8) [0203.945] Sleep (dwMilliseconds=0x3e8) [0203.947] Sleep (dwMilliseconds=0x3e8) [0203.949] Sleep (dwMilliseconds=0x3e8) [0203.951] Sleep (dwMilliseconds=0x3e8) [0203.953] Sleep (dwMilliseconds=0x3e8) [0203.955] Sleep (dwMilliseconds=0x3e8) [0203.958] Sleep (dwMilliseconds=0x3e8) [0203.960] Sleep (dwMilliseconds=0x3e8) [0203.962] Sleep (dwMilliseconds=0x3e8) [0203.964] Sleep (dwMilliseconds=0x3e8) [0203.966] Sleep (dwMilliseconds=0x3e8) [0203.968] Sleep (dwMilliseconds=0x3e8) [0203.970] Sleep (dwMilliseconds=0x3e8) [0203.972] Sleep (dwMilliseconds=0x3e8) [0203.974] Sleep (dwMilliseconds=0x3e8) [0203.976] Sleep (dwMilliseconds=0x3e8) [0203.978] Sleep (dwMilliseconds=0x3e8) [0203.980] Sleep (dwMilliseconds=0x3e8) [0203.983] Sleep (dwMilliseconds=0x3e8) [0203.985] Sleep (dwMilliseconds=0x3e8) [0203.987] Sleep (dwMilliseconds=0x3e8) [0203.989] Sleep (dwMilliseconds=0x3e8) [0203.991] Sleep (dwMilliseconds=0x3e8) [0203.993] Sleep (dwMilliseconds=0x3e8) [0204.006] Sleep (dwMilliseconds=0x3e8) [0204.007] Sleep (dwMilliseconds=0x3e8) [0204.009] Sleep (dwMilliseconds=0x3e8) [0204.011] Sleep (dwMilliseconds=0x3e8) [0204.013] Sleep (dwMilliseconds=0x3e8) [0204.030] Sleep (dwMilliseconds=0x3e8) [0204.032] Sleep (dwMilliseconds=0x3e8) [0204.034] Sleep (dwMilliseconds=0x3e8) [0204.036] Sleep (dwMilliseconds=0x3e8) [0204.038] Sleep (dwMilliseconds=0x3e8) [0204.040] Sleep (dwMilliseconds=0x3e8) [0204.042] Sleep (dwMilliseconds=0x3e8) [0204.044] Sleep (dwMilliseconds=0x3e8) [0204.046] Sleep (dwMilliseconds=0x3e8) [0204.048] Sleep (dwMilliseconds=0x3e8) [0204.050] Sleep (dwMilliseconds=0x3e8) [0204.052] Sleep (dwMilliseconds=0x3e8) [0204.054] Sleep (dwMilliseconds=0x3e8) [0204.056] Sleep (dwMilliseconds=0x3e8) [0204.058] Sleep (dwMilliseconds=0x3e8) [0204.060] Sleep (dwMilliseconds=0x3e8) [0204.065] Sleep (dwMilliseconds=0x3e8) [0204.066] Sleep (dwMilliseconds=0x3e8) [0204.068] Sleep (dwMilliseconds=0x3e8) [0204.070] Sleep (dwMilliseconds=0x3e8) [0204.087] Sleep (dwMilliseconds=0x3e8) [0204.088] Sleep (dwMilliseconds=0x3e8) [0204.092] Sleep (dwMilliseconds=0x3e8) [0204.095] Sleep (dwMilliseconds=0x3e8) [0204.099] Sleep (dwMilliseconds=0x3e8) [0204.101] Sleep (dwMilliseconds=0x3e8) [0204.103] Sleep (dwMilliseconds=0x3e8) [0204.147] Sleep (dwMilliseconds=0x3e8) [0204.150] Sleep (dwMilliseconds=0x3e8) [0204.152] Sleep (dwMilliseconds=0x3e8) [0204.155] Sleep (dwMilliseconds=0x3e8) [0204.156] Sleep (dwMilliseconds=0x3e8) [0204.158] Sleep (dwMilliseconds=0x3e8) [0204.326] Sleep (dwMilliseconds=0x3e8) [0204.328] Sleep (dwMilliseconds=0x3e8) [0204.330] Sleep (dwMilliseconds=0x3e8) [0204.332] Sleep (dwMilliseconds=0x3e8) [0204.334] Sleep (dwMilliseconds=0x3e8) [0204.336] Sleep (dwMilliseconds=0x3e8) [0204.338] Sleep (dwMilliseconds=0x3e8) [0204.340] Sleep (dwMilliseconds=0x3e8) [0204.342] Sleep (dwMilliseconds=0x3e8) [0204.344] Sleep (dwMilliseconds=0x3e8) [0204.346] Sleep (dwMilliseconds=0x3e8) [0204.349] Sleep (dwMilliseconds=0x3e8) [0204.351] Sleep (dwMilliseconds=0x3e8) [0204.353] Sleep (dwMilliseconds=0x3e8) [0204.355] Sleep (dwMilliseconds=0x3e8) [0204.357] Sleep (dwMilliseconds=0x3e8) [0204.359] Sleep (dwMilliseconds=0x3e8) [0204.362] Sleep (dwMilliseconds=0x3e8) [0204.365] Sleep (dwMilliseconds=0x3e8) [0204.367] Sleep (dwMilliseconds=0x3e8) [0204.369] Sleep (dwMilliseconds=0x3e8) [0204.372] Sleep (dwMilliseconds=0x3e8) [0204.373] Sleep (dwMilliseconds=0x3e8) [0204.375] Sleep (dwMilliseconds=0x3e8) [0204.377] Sleep (dwMilliseconds=0x3e8) [0204.379] Sleep (dwMilliseconds=0x3e8) [0204.382] Sleep (dwMilliseconds=0x3e8) [0204.384] Sleep (dwMilliseconds=0x3e8) [0204.386] Sleep (dwMilliseconds=0x3e8) [0204.388] Sleep (dwMilliseconds=0x3e8) [0204.390] Sleep (dwMilliseconds=0x3e8) [0204.392] Sleep (dwMilliseconds=0x3e8) [0204.394] Sleep (dwMilliseconds=0x3e8) [0204.396] Sleep (dwMilliseconds=0x3e8) [0204.400] Sleep (dwMilliseconds=0x3e8) [0204.401] Sleep (dwMilliseconds=0x3e8) [0204.403] Sleep (dwMilliseconds=0x3e8) [0204.405] Sleep (dwMilliseconds=0x3e8) [0204.407] Sleep (dwMilliseconds=0x3e8) [0204.409] Sleep (dwMilliseconds=0x3e8) [0204.411] Sleep (dwMilliseconds=0x3e8) [0204.413] Sleep (dwMilliseconds=0x3e8) [0204.415] Sleep (dwMilliseconds=0x3e8) [0204.417] Sleep (dwMilliseconds=0x3e8) [0204.418] Sleep (dwMilliseconds=0x3e8) [0204.420] Sleep (dwMilliseconds=0x3e8) [0204.422] Sleep (dwMilliseconds=0x3e8) [0204.424] Sleep (dwMilliseconds=0x3e8) [0204.426] Sleep (dwMilliseconds=0x3e8) [0204.428] Sleep (dwMilliseconds=0x3e8) [0204.430] Sleep (dwMilliseconds=0x3e8) [0204.433] Sleep (dwMilliseconds=0x3e8) [0204.435] Sleep (dwMilliseconds=0x3e8) [0204.439] Sleep (dwMilliseconds=0x3e8) [0204.441] Sleep (dwMilliseconds=0x3e8) [0204.443] Sleep (dwMilliseconds=0x3e8) [0204.445] Sleep (dwMilliseconds=0x3e8) [0204.447] Sleep (dwMilliseconds=0x3e8) [0204.450] Sleep (dwMilliseconds=0x3e8) [0204.452] Sleep (dwMilliseconds=0x3e8) [0204.454] Sleep (dwMilliseconds=0x3e8) [0204.456] Sleep (dwMilliseconds=0x3e8) [0204.458] Sleep (dwMilliseconds=0x3e8) [0204.460] Sleep (dwMilliseconds=0x3e8) [0204.462] Sleep (dwMilliseconds=0x3e8) [0204.464] Sleep (dwMilliseconds=0x3e8) [0204.466] Sleep (dwMilliseconds=0x3e8) [0204.468] Sleep (dwMilliseconds=0x3e8) [0204.470] Sleep (dwMilliseconds=0x3e8) [0204.472] Sleep (dwMilliseconds=0x3e8) [0204.474] Sleep (dwMilliseconds=0x3e8) [0204.476] Sleep (dwMilliseconds=0x3e8) [0204.479] Sleep (dwMilliseconds=0x3e8) [0204.481] Sleep (dwMilliseconds=0x3e8) [0204.483] Sleep (dwMilliseconds=0x3e8) [0204.485] Sleep (dwMilliseconds=0x3e8) [0204.487] Sleep (dwMilliseconds=0x3e8) [0204.489] Sleep (dwMilliseconds=0x3e8) [0204.491] Sleep (dwMilliseconds=0x3e8) [0204.493] Sleep (dwMilliseconds=0x3e8) [0204.495] Sleep (dwMilliseconds=0x3e8) [0204.497] Sleep (dwMilliseconds=0x3e8) [0204.499] Sleep (dwMilliseconds=0x3e8) [0204.501] Sleep (dwMilliseconds=0x3e8) [0204.503] Sleep (dwMilliseconds=0x3e8) [0204.505] Sleep (dwMilliseconds=0x3e8) [0204.507] Sleep (dwMilliseconds=0x3e8) [0204.509] Sleep (dwMilliseconds=0x3e8) [0204.511] Sleep (dwMilliseconds=0x3e8) [0204.513] Sleep (dwMilliseconds=0x3e8) [0204.515] Sleep (dwMilliseconds=0x3e8) [0204.517] Sleep (dwMilliseconds=0x3e8) [0204.520] Sleep (dwMilliseconds=0x3e8) [0204.521] Sleep (dwMilliseconds=0x3e8) [0204.523] Sleep (dwMilliseconds=0x3e8) [0204.525] Sleep (dwMilliseconds=0x3e8) [0204.527] Sleep (dwMilliseconds=0x3e8) [0204.530] Sleep (dwMilliseconds=0x3e8) [0204.531] Sleep (dwMilliseconds=0x3e8) [0204.535] Sleep (dwMilliseconds=0x3e8) [0204.538] Sleep (dwMilliseconds=0x3e8) [0204.540] Sleep (dwMilliseconds=0x3e8) [0204.542] Sleep (dwMilliseconds=0x3e8) [0204.544] Sleep (dwMilliseconds=0x3e8) [0204.546] Sleep (dwMilliseconds=0x3e8) [0204.548] Sleep (dwMilliseconds=0x3e8) [0204.550] Sleep (dwMilliseconds=0x3e8) [0204.552] Sleep (dwMilliseconds=0x3e8) [0204.554] Sleep (dwMilliseconds=0x3e8) [0204.556] Sleep (dwMilliseconds=0x3e8) [0204.558] Sleep (dwMilliseconds=0x3e8) [0204.566] Sleep (dwMilliseconds=0x3e8) [0204.567] Sleep (dwMilliseconds=0x3e8) [0204.573] Sleep (dwMilliseconds=0x3e8) [0204.575] Sleep (dwMilliseconds=0x3e8) [0204.577] Sleep (dwMilliseconds=0x3e8) [0204.579] Sleep (dwMilliseconds=0x3e8) [0204.581] Sleep (dwMilliseconds=0x3e8) [0204.583] Sleep (dwMilliseconds=0x3e8) [0204.585] Sleep (dwMilliseconds=0x3e8) [0204.587] Sleep (dwMilliseconds=0x3e8) [0204.598] Sleep (dwMilliseconds=0x3e8) [0204.599] Sleep (dwMilliseconds=0x3e8) [0204.601] Sleep (dwMilliseconds=0x3e8) [0204.603] Sleep (dwMilliseconds=0x3e8) [0204.605] Sleep (dwMilliseconds=0x3e8) [0204.607] Sleep (dwMilliseconds=0x3e8) [0204.611] Sleep (dwMilliseconds=0x3e8) [0204.613] Sleep (dwMilliseconds=0x3e8) [0204.615] Sleep (dwMilliseconds=0x3e8) [0204.617] Sleep (dwMilliseconds=0x3e8) [0204.619] Sleep (dwMilliseconds=0x3e8) [0204.621] Sleep (dwMilliseconds=0x3e8) [0204.623] Sleep (dwMilliseconds=0x3e8) [0204.625] Sleep (dwMilliseconds=0x3e8) [0204.627] Sleep (dwMilliseconds=0x3e8) [0204.629] Sleep (dwMilliseconds=0x3e8) [0204.633] Sleep (dwMilliseconds=0x3e8) [0204.635] Sleep (dwMilliseconds=0x3e8) [0204.637] Sleep (dwMilliseconds=0x3e8) [0204.639] Sleep (dwMilliseconds=0x3e8) [0204.641] Sleep (dwMilliseconds=0x3e8) [0204.643] Sleep (dwMilliseconds=0x3e8) [0204.645] Sleep (dwMilliseconds=0x3e8) [0204.647] Sleep (dwMilliseconds=0x3e8) [0204.650] Sleep (dwMilliseconds=0x3e8) [0204.652] Sleep (dwMilliseconds=0x3e8) [0204.656] Sleep (dwMilliseconds=0x3e8) [0204.658] Sleep (dwMilliseconds=0x3e8) [0204.660] Sleep (dwMilliseconds=0x3e8) [0204.662] Sleep (dwMilliseconds=0x3e8) [0204.664] Sleep (dwMilliseconds=0x3e8) [0204.666] Sleep (dwMilliseconds=0x3e8) [0204.668] Sleep (dwMilliseconds=0x3e8) [0204.670] Sleep (dwMilliseconds=0x3e8) [0204.672] Sleep (dwMilliseconds=0x3e8) [0204.674] Sleep (dwMilliseconds=0x3e8) [0204.690] Sleep (dwMilliseconds=0x3e8) [0204.692] Sleep (dwMilliseconds=0x3e8) [0204.695] Sleep (dwMilliseconds=0x3e8) [0204.697] Sleep (dwMilliseconds=0x3e8) [0204.699] Sleep (dwMilliseconds=0x3e8) [0204.701] Sleep (dwMilliseconds=0x3e8) [0204.703] Sleep (dwMilliseconds=0x3e8) [0204.705] Sleep (dwMilliseconds=0x3e8) [0204.707] Sleep (dwMilliseconds=0x3e8) [0204.709] Sleep (dwMilliseconds=0x3e8) [0204.719] Sleep (dwMilliseconds=0x3e8) [0204.723] Sleep (dwMilliseconds=0x3e8) [0204.725] Sleep (dwMilliseconds=0x3e8) [0204.727] Sleep (dwMilliseconds=0x3e8) [0204.729] Sleep (dwMilliseconds=0x3e8) [0204.731] Sleep (dwMilliseconds=0x3e8) [0204.733] Sleep (dwMilliseconds=0x3e8) [0204.735] Sleep (dwMilliseconds=0x3e8) [0204.739] Sleep (dwMilliseconds=0x3e8) [0204.740] Sleep (dwMilliseconds=0x3e8) [0204.742] Sleep (dwMilliseconds=0x3e8) [0204.744] Sleep (dwMilliseconds=0x3e8) [0204.746] Sleep (dwMilliseconds=0x3e8) [0204.748] Sleep (dwMilliseconds=0x3e8) [0204.749] Sleep (dwMilliseconds=0x3e8) [0204.751] Sleep (dwMilliseconds=0x3e8) [0204.752] Sleep (dwMilliseconds=0x3e8) [0204.754] Sleep (dwMilliseconds=0x3e8) [0204.756] Sleep (dwMilliseconds=0x3e8) [0204.758] Sleep (dwMilliseconds=0x3e8) [0204.760] Sleep (dwMilliseconds=0x3e8) [0204.762] Sleep (dwMilliseconds=0x3e8) [0204.764] Sleep (dwMilliseconds=0x3e8) [0204.765] Sleep (dwMilliseconds=0x3e8) [0204.767] Sleep (dwMilliseconds=0x3e8) [0204.769] Sleep (dwMilliseconds=0x3e8) [0204.771] Sleep (dwMilliseconds=0x3e8) [0204.773] Sleep (dwMilliseconds=0x3e8) [0204.775] Sleep (dwMilliseconds=0x3e8) [0204.777] Sleep (dwMilliseconds=0x3e8) [0204.779] Sleep (dwMilliseconds=0x3e8) [0204.781] Sleep (dwMilliseconds=0x3e8) [0204.783] Sleep (dwMilliseconds=0x3e8) [0204.785] Sleep (dwMilliseconds=0x3e8) [0204.787] Sleep (dwMilliseconds=0x3e8) [0204.789] Sleep (dwMilliseconds=0x3e8) [0204.791] Sleep (dwMilliseconds=0x3e8) [0204.793] Sleep (dwMilliseconds=0x3e8) [0204.795] Sleep (dwMilliseconds=0x3e8) [0204.797] Sleep (dwMilliseconds=0x3e8) [0204.799] Sleep (dwMilliseconds=0x3e8) [0204.801] Sleep (dwMilliseconds=0x3e8) [0204.803] Sleep (dwMilliseconds=0x3e8) [0204.805] Sleep (dwMilliseconds=0x3e8) [0204.807] Sleep (dwMilliseconds=0x3e8) [0204.808] Sleep (dwMilliseconds=0x3e8) [0204.810] Sleep (dwMilliseconds=0x3e8) [0204.812] Sleep (dwMilliseconds=0x3e8) [0204.814] Sleep (dwMilliseconds=0x3e8) [0204.816] Sleep (dwMilliseconds=0x3e8) [0204.818] Sleep (dwMilliseconds=0x3e8) [0204.820] Sleep (dwMilliseconds=0x3e8) [0204.822] Sleep (dwMilliseconds=0x3e8) [0204.824] Sleep (dwMilliseconds=0x3e8) [0204.826] Sleep (dwMilliseconds=0x3e8) [0204.827] Sleep (dwMilliseconds=0x3e8) [0204.829] Sleep (dwMilliseconds=0x3e8) [0204.830] Sleep (dwMilliseconds=0x3e8) [0204.832] Sleep (dwMilliseconds=0x3e8) [0204.834] Sleep (dwMilliseconds=0x3e8) [0204.836] Sleep (dwMilliseconds=0x3e8) [0204.838] Sleep (dwMilliseconds=0x3e8) [0204.840] Sleep (dwMilliseconds=0x3e8) [0204.842] Sleep (dwMilliseconds=0x3e8) [0204.844] Sleep (dwMilliseconds=0x3e8) [0204.846] Sleep (dwMilliseconds=0x3e8) [0204.848] Sleep (dwMilliseconds=0x3e8) [0204.850] Sleep (dwMilliseconds=0x3e8) [0204.852] Sleep (dwMilliseconds=0x3e8) [0204.854] Sleep (dwMilliseconds=0x3e8) [0204.856] Sleep (dwMilliseconds=0x3e8) [0204.858] Sleep (dwMilliseconds=0x3e8) [0204.860] Sleep (dwMilliseconds=0x3e8) [0204.862] Sleep (dwMilliseconds=0x3e8) [0204.865] Sleep (dwMilliseconds=0x3e8) [0204.867] Sleep (dwMilliseconds=0x3e8) [0204.869] Sleep (dwMilliseconds=0x3e8) [0204.871] Sleep (dwMilliseconds=0x3e8) [0204.873] Sleep (dwMilliseconds=0x3e8) [0204.875] Sleep (dwMilliseconds=0x3e8) [0204.877] Sleep (dwMilliseconds=0x3e8) [0204.879] Sleep (dwMilliseconds=0x3e8) [0204.881] Sleep (dwMilliseconds=0x3e8) [0204.883] Sleep (dwMilliseconds=0x3e8) [0204.885] Sleep (dwMilliseconds=0x3e8) [0204.887] Sleep (dwMilliseconds=0x3e8) [0204.889] Sleep (dwMilliseconds=0x3e8) [0204.891] Sleep (dwMilliseconds=0x3e8) [0204.910] Sleep (dwMilliseconds=0x3e8) [0204.911] Sleep (dwMilliseconds=0x3e8) [0204.913] Sleep (dwMilliseconds=0x3e8) [0204.915] Sleep (dwMilliseconds=0x3e8) [0204.917] Sleep (dwMilliseconds=0x3e8) [0204.918] Sleep (dwMilliseconds=0x3e8) [0204.920] Sleep (dwMilliseconds=0x3e8) [0204.921] Sleep (dwMilliseconds=0x3e8) [0204.923] Sleep (dwMilliseconds=0x3e8) [0204.926] Sleep (dwMilliseconds=0x3e8) [0204.928] Sleep (dwMilliseconds=0x3e8) [0204.930] Sleep (dwMilliseconds=0x3e8) [0204.932] Sleep (dwMilliseconds=0x3e8) [0204.934] Sleep (dwMilliseconds=0x3e8) [0204.936] Sleep (dwMilliseconds=0x3e8) [0204.938] Sleep (dwMilliseconds=0x3e8) [0204.940] Sleep (dwMilliseconds=0x3e8) [0204.942] Sleep (dwMilliseconds=0x3e8) [0204.943] Sleep (dwMilliseconds=0x3e8) [0204.945] Sleep (dwMilliseconds=0x3e8) [0204.947] Sleep (dwMilliseconds=0x3e8) [0204.950] Sleep (dwMilliseconds=0x3e8) [0204.952] Sleep (dwMilliseconds=0x3e8) [0204.954] Sleep (dwMilliseconds=0x3e8) [0204.956] Sleep (dwMilliseconds=0x3e8) [0204.958] Sleep (dwMilliseconds=0x3e8) [0204.960] Sleep (dwMilliseconds=0x3e8) [0204.962] Sleep (dwMilliseconds=0x3e8) [0204.964] Sleep (dwMilliseconds=0x3e8) [0204.966] Sleep (dwMilliseconds=0x3e8) [0204.968] Sleep (dwMilliseconds=0x3e8) [0204.970] Sleep (dwMilliseconds=0x3e8) [0204.972] Sleep (dwMilliseconds=0x3e8) [0204.976] Sleep (dwMilliseconds=0x3e8) [0204.977] Sleep (dwMilliseconds=0x3e8) [0204.979] Sleep (dwMilliseconds=0x3e8) [0204.981] Sleep (dwMilliseconds=0x3e8) [0204.983] Sleep (dwMilliseconds=0x3e8) [0204.985] Sleep (dwMilliseconds=0x3e8) [0204.987] Sleep (dwMilliseconds=0x3e8) [0204.989] Sleep (dwMilliseconds=0x3e8) [0204.991] Sleep (dwMilliseconds=0x3e8) [0204.993] Sleep (dwMilliseconds=0x3e8) [0204.995] Sleep (dwMilliseconds=0x3e8) [0205.007] Sleep (dwMilliseconds=0x3e8) [0205.009] Sleep (dwMilliseconds=0x3e8) [0205.011] Sleep (dwMilliseconds=0x3e8) [0205.013] Sleep (dwMilliseconds=0x3e8) [0205.015] Sleep (dwMilliseconds=0x3e8) [0205.017] Sleep (dwMilliseconds=0x3e8) [0205.019] Sleep (dwMilliseconds=0x3e8) [0205.021] Sleep (dwMilliseconds=0x3e8) [0205.023] Sleep (dwMilliseconds=0x3e8) [0205.027] Sleep (dwMilliseconds=0x3e8) [0205.029] Sleep (dwMilliseconds=0x3e8) [0205.031] Sleep (dwMilliseconds=0x3e8) [0205.033] Sleep (dwMilliseconds=0x3e8) [0205.035] Sleep (dwMilliseconds=0x3e8) [0205.037] Sleep (dwMilliseconds=0x3e8) [0205.039] Sleep (dwMilliseconds=0x3e8) [0205.041] Sleep (dwMilliseconds=0x3e8) [0205.043] Sleep (dwMilliseconds=0x3e8) [0205.045] Sleep (dwMilliseconds=0x3e8) [0205.046] Sleep (dwMilliseconds=0x3e8) [0205.048] Sleep (dwMilliseconds=0x3e8) [0205.050] Sleep (dwMilliseconds=0x3e8) [0205.053] Sleep (dwMilliseconds=0x3e8) [0205.055] Sleep (dwMilliseconds=0x3e8) [0205.057] Sleep (dwMilliseconds=0x3e8) [0205.059] Sleep (dwMilliseconds=0x3e8) [0205.061] Sleep (dwMilliseconds=0x3e8) [0205.063] Sleep (dwMilliseconds=0x3e8) [0205.065] Sleep (dwMilliseconds=0x3e8) [0205.067] Sleep (dwMilliseconds=0x3e8) [0205.069] Sleep (dwMilliseconds=0x3e8) [0205.071] Sleep (dwMilliseconds=0x3e8) [0205.073] Sleep (dwMilliseconds=0x3e8) [0205.075] Sleep (dwMilliseconds=0x3e8) [0205.077] Sleep (dwMilliseconds=0x3e8) [0205.079] Sleep (dwMilliseconds=0x3e8) [0205.081] Sleep (dwMilliseconds=0x3e8) [0205.083] Sleep (dwMilliseconds=0x3e8) [0205.085] Sleep (dwMilliseconds=0x3e8) [0205.087] Sleep (dwMilliseconds=0x3e8) [0205.089] Sleep (dwMilliseconds=0x3e8) [0205.091] Sleep (dwMilliseconds=0x3e8) [0205.093] Sleep (dwMilliseconds=0x3e8) [0205.095] Sleep (dwMilliseconds=0x3e8) [0205.097] Sleep (dwMilliseconds=0x3e8) [0205.099] Sleep (dwMilliseconds=0x3e8) [0205.101] Sleep (dwMilliseconds=0x3e8) [0205.103] Sleep (dwMilliseconds=0x3e8) [0205.105] Sleep (dwMilliseconds=0x3e8) [0205.107] Sleep (dwMilliseconds=0x3e8) [0205.111] Sleep (dwMilliseconds=0x3e8) [0205.113] Sleep (dwMilliseconds=0x3e8) [0205.115] Sleep (dwMilliseconds=0x3e8) [0205.117] Sleep (dwMilliseconds=0x3e8) [0205.119] Sleep (dwMilliseconds=0x3e8) [0205.121] Sleep (dwMilliseconds=0x3e8) [0205.123] Sleep (dwMilliseconds=0x3e8) [0205.125] Sleep (dwMilliseconds=0x3e8) [0205.127] Sleep (dwMilliseconds=0x3e8) [0205.129] Sleep (dwMilliseconds=0x3e8) [0205.131] Sleep (dwMilliseconds=0x3e8) [0205.133] Sleep (dwMilliseconds=0x3e8) [0205.135] Sleep (dwMilliseconds=0x3e8) [0205.137] Sleep (dwMilliseconds=0x3e8) [0205.142] Sleep (dwMilliseconds=0x3e8) [0205.144] Sleep (dwMilliseconds=0x3e8) [0205.146] Sleep (dwMilliseconds=0x3e8) [0205.148] Sleep (dwMilliseconds=0x3e8) [0205.150] Sleep (dwMilliseconds=0x3e8) [0205.152] Sleep (dwMilliseconds=0x3e8) [0205.154] Sleep (dwMilliseconds=0x3e8) [0205.156] Sleep (dwMilliseconds=0x3e8) [0205.158] Sleep (dwMilliseconds=0x3e8) [0205.160] Sleep (dwMilliseconds=0x3e8) [0205.162] Sleep (dwMilliseconds=0x3e8) [0205.164] Sleep (dwMilliseconds=0x3e8) [0205.166] Sleep (dwMilliseconds=0x3e8) [0205.168] Sleep (dwMilliseconds=0x3e8) [0205.171] Sleep (dwMilliseconds=0x3e8) [0205.173] Sleep (dwMilliseconds=0x3e8) [0205.192] Sleep (dwMilliseconds=0x3e8) [0205.193] Sleep (dwMilliseconds=0x3e8) [0205.195] Sleep (dwMilliseconds=0x3e8) [0205.197] Sleep (dwMilliseconds=0x3e8) [0205.199] Sleep (dwMilliseconds=0x3e8) [0205.201] Sleep (dwMilliseconds=0x3e8) [0205.203] Sleep (dwMilliseconds=0x3e8) [0205.289] Sleep (dwMilliseconds=0x3e8) [0205.323] Sleep (dwMilliseconds=0x3e8) [0205.364] Sleep (dwMilliseconds=0x3e8) [0205.398] Sleep (dwMilliseconds=0x3e8) [0205.435] Sleep (dwMilliseconds=0x3e8) [0205.470] Sleep (dwMilliseconds=0x3e8) [0205.504] Sleep (dwMilliseconds=0x3e8) [0205.537] Sleep (dwMilliseconds=0x3e8) [0205.573] Sleep (dwMilliseconds=0x3e8) [0205.619] Sleep (dwMilliseconds=0x3e8) [0205.654] Sleep (dwMilliseconds=0x3e8) [0205.694] Sleep (dwMilliseconds=0x3e8) [0205.730] Sleep (dwMilliseconds=0x3e8) [0205.763] Sleep (dwMilliseconds=0x3e8) [0205.798] Sleep (dwMilliseconds=0x3e8) [0205.832] Sleep (dwMilliseconds=0x3e8) [0205.866] Sleep (dwMilliseconds=0x3e8) [0205.912] Sleep (dwMilliseconds=0x3e8) [0205.945] Sleep (dwMilliseconds=0x3e8) [0205.978] Sleep (dwMilliseconds=0x3e8) [0206.012] Sleep (dwMilliseconds=0x3e8) [0206.045] Sleep (dwMilliseconds=0x3e8) [0206.082] Sleep (dwMilliseconds=0x3e8) [0206.117] Sleep (dwMilliseconds=0x3e8) [0206.151] Sleep (dwMilliseconds=0x3e8) [0206.184] Sleep (dwMilliseconds=0x3e8) [0206.218] Sleep (dwMilliseconds=0x3e8) [0206.252] Sleep (dwMilliseconds=0x3e8) [0206.286] Sleep (dwMilliseconds=0x3e8) [0206.324] Sleep (dwMilliseconds=0x3e8) [0206.357] Sleep (dwMilliseconds=0x3e8) [0206.391] Sleep (dwMilliseconds=0x3e8) [0206.444] Sleep (dwMilliseconds=0x3e8) [0206.483] Sleep (dwMilliseconds=0x3e8) [0206.520] Sleep (dwMilliseconds=0x3e8) [0206.555] Sleep (dwMilliseconds=0x3e8) [0206.597] Sleep (dwMilliseconds=0x3e8) [0206.633] Sleep (dwMilliseconds=0x3e8) [0206.671] Sleep (dwMilliseconds=0x3e8) [0206.712] Sleep (dwMilliseconds=0x3e8) [0206.751] Sleep (dwMilliseconds=0x3e8) [0206.787] Sleep (dwMilliseconds=0x3e8) [0206.822] Sleep (dwMilliseconds=0x3e8) [0206.856] Sleep (dwMilliseconds=0x3e8) [0206.891] Sleep (dwMilliseconds=0x3e8) [0206.952] Sleep (dwMilliseconds=0x3e8) [0206.986] Sleep (dwMilliseconds=0x3e8) [0207.020] Sleep (dwMilliseconds=0x3e8) [0207.053] Sleep (dwMilliseconds=0x3e8) [0207.087] Sleep (dwMilliseconds=0x3e8) [0207.121] Sleep (dwMilliseconds=0x3e8) [0207.154] Sleep (dwMilliseconds=0x3e8) [0207.195] Sleep (dwMilliseconds=0x3e8) [0207.234] Sleep (dwMilliseconds=0x3e8) [0207.269] Sleep (dwMilliseconds=0x3e8) [0207.303] Sleep (dwMilliseconds=0x3e8) [0207.337] Sleep (dwMilliseconds=0x3e8) [0207.372] Sleep (dwMilliseconds=0x3e8) [0207.406] Sleep (dwMilliseconds=0x3e8) [0207.441] Sleep (dwMilliseconds=0x3e8) [0207.475] Sleep (dwMilliseconds=0x3e8) [0207.510] Sleep (dwMilliseconds=0x3e8) [0207.544] Sleep (dwMilliseconds=0x3e8) [0207.578] Sleep (dwMilliseconds=0x3e8) [0207.619] Sleep (dwMilliseconds=0x3e8) [0207.655] Sleep (dwMilliseconds=0x3e8) [0207.689] Sleep (dwMilliseconds=0x3e8) [0207.727] Sleep (dwMilliseconds=0x3e8) [0207.765] Sleep (dwMilliseconds=0x3e8) [0207.799] Sleep (dwMilliseconds=0x3e8) [0207.837] Sleep (dwMilliseconds=0x3e8) [0207.872] Sleep (dwMilliseconds=0x3e8) [0207.929] Sleep (dwMilliseconds=0x3e8) [0207.964] Sleep (dwMilliseconds=0x3e8) [0207.999] Sleep (dwMilliseconds=0x3e8) [0208.034] Sleep (dwMilliseconds=0x3e8) [0208.068] Sleep (dwMilliseconds=0x3e8) [0208.108] Sleep (dwMilliseconds=0x3e8) [0208.142] Sleep (dwMilliseconds=0x3e8) [0208.176] Sleep (dwMilliseconds=0x3e8) [0208.214] Sleep (dwMilliseconds=0x3e8) [0208.251] Sleep (dwMilliseconds=0x3e8) [0208.287] Sleep (dwMilliseconds=0x3e8) [0208.322] Sleep (dwMilliseconds=0x3e8) [0208.358] Sleep (dwMilliseconds=0x3e8) [0208.394] Sleep (dwMilliseconds=0x3e8) [0208.431] Sleep (dwMilliseconds=0x3e8) [0208.467] Sleep (dwMilliseconds=0x3e8) [0208.501] Sleep (dwMilliseconds=0x3e8) [0208.536] Sleep (dwMilliseconds=0x3e8) [0208.572] Sleep (dwMilliseconds=0x3e8) [0208.620] Sleep (dwMilliseconds=0x3e8) [0208.655] Sleep (dwMilliseconds=0x3e8) [0208.691] Sleep (dwMilliseconds=0x3e8) [0208.728] Sleep (dwMilliseconds=0x3e8) [0208.777] Sleep (dwMilliseconds=0x3e8) [0208.811] Sleep (dwMilliseconds=0x3e8) [0208.846] Sleep (dwMilliseconds=0x3e8) [0208.881] Sleep (dwMilliseconds=0x3e8) [0208.931] Sleep (dwMilliseconds=0x3e8) [0209.071] Sleep (dwMilliseconds=0x3e8) [0209.105] Sleep (dwMilliseconds=0x3e8) [0209.144] Sleep (dwMilliseconds=0x3e8) [0209.179] Sleep (dwMilliseconds=0x3e8) [0209.213] Sleep (dwMilliseconds=0x3e8) [0209.247] Sleep (dwMilliseconds=0x3e8) [0209.282] Sleep (dwMilliseconds=0x3e8) [0209.316] Sleep (dwMilliseconds=0x3e8) [0209.350] Sleep (dwMilliseconds=0x3e8) [0209.385] Sleep (dwMilliseconds=0x3e8) [0209.420] Sleep (dwMilliseconds=0x3e8) [0209.453] Sleep (dwMilliseconds=0x3e8) [0209.488] Sleep (dwMilliseconds=0x3e8) [0209.523] Sleep (dwMilliseconds=0x3e8) [0209.557] Sleep (dwMilliseconds=0x3e8) [0209.600] Sleep (dwMilliseconds=0x3e8) [0209.634] Sleep (dwMilliseconds=0x3e8) [0209.668] Sleep (dwMilliseconds=0x3e8) [0209.704] Sleep (dwMilliseconds=0x3e8) [0209.740] Sleep (dwMilliseconds=0x3e8) [0209.775] Sleep (dwMilliseconds=0x3e8) [0209.810] Sleep (dwMilliseconds=0x3e8) [0209.844] Sleep (dwMilliseconds=0x3e8) [0209.878] Sleep (dwMilliseconds=0x3e8) [0209.937] Sleep (dwMilliseconds=0x3e8) [0209.972] Sleep (dwMilliseconds=0x3e8) [0210.007] Sleep (dwMilliseconds=0x3e8) [0210.041] Sleep (dwMilliseconds=0x3e8) [0210.074] Sleep (dwMilliseconds=0x3e8) [0210.109] Sleep (dwMilliseconds=0x3e8) [0210.233] Sleep (dwMilliseconds=0x3e8) [0210.271] Sleep (dwMilliseconds=0x3e8) [0210.307] Sleep (dwMilliseconds=0x3e8) [0210.342] Sleep (dwMilliseconds=0x3e8) [0210.378] Sleep (dwMilliseconds=0x3e8) [0210.416] Sleep (dwMilliseconds=0x3e8) [0210.451] Sleep (dwMilliseconds=0x3e8) [0210.486] Sleep (dwMilliseconds=0x3e8) [0210.516] Sleep (dwMilliseconds=0x3e8) [0210.521] Sleep (dwMilliseconds=0x3e8) [0210.562] Sleep (dwMilliseconds=0x3e8) [0210.608] Sleep (dwMilliseconds=0x3e8) [0210.645] Sleep (dwMilliseconds=0x3e8) [0210.682] Sleep (dwMilliseconds=0x3e8) [0210.720] Sleep (dwMilliseconds=0x3e8) [0210.757] Sleep (dwMilliseconds=0x3e8) [0210.793] Sleep (dwMilliseconds=0x3e8) [0210.827] Sleep (dwMilliseconds=0x3e8) [0210.862] Sleep (dwMilliseconds=0x3e8) [0210.928] Sleep (dwMilliseconds=0x3e8) [0210.980] Sleep (dwMilliseconds=0x3e8) [0211.012] Sleep (dwMilliseconds=0x3e8) [0211.014] Sleep (dwMilliseconds=0x3e8) [0211.018] Sleep (dwMilliseconds=0x3e8) [0211.020] Sleep (dwMilliseconds=0x3e8) [0211.022] Sleep (dwMilliseconds=0x3e8) [0211.024] Sleep (dwMilliseconds=0x3e8) [0211.026] Sleep (dwMilliseconds=0x3e8) [0211.033] Sleep (dwMilliseconds=0x3e8) [0211.035] Sleep (dwMilliseconds=0x3e8) [0211.037] Sleep (dwMilliseconds=0x3e8) [0211.039] Sleep (dwMilliseconds=0x3e8) [0211.041] Sleep (dwMilliseconds=0x3e8) [0211.043] Sleep (dwMilliseconds=0x3e8) [0211.045] Sleep (dwMilliseconds=0x3e8) [0211.047] Sleep (dwMilliseconds=0x3e8) [0211.049] Sleep (dwMilliseconds=0x3e8) [0211.051] Sleep (dwMilliseconds=0x3e8) [0211.053] Sleep (dwMilliseconds=0x3e8) [0211.055] Sleep (dwMilliseconds=0x3e8) [0211.057] Sleep (dwMilliseconds=0x3e8) [0211.059] Sleep (dwMilliseconds=0x3e8) [0211.061] Sleep (dwMilliseconds=0x3e8) [0211.063] Sleep (dwMilliseconds=0x3e8) [0211.065] Sleep (dwMilliseconds=0x3e8) [0211.067] Sleep (dwMilliseconds=0x3e8) [0211.069] Sleep (dwMilliseconds=0x3e8) [0211.071] Sleep (dwMilliseconds=0x3e8) [0211.073] Sleep (dwMilliseconds=0x3e8) [0211.075] Sleep (dwMilliseconds=0x3e8) [0211.077] Sleep (dwMilliseconds=0x3e8) [0211.079] Sleep (dwMilliseconds=0x3e8) [0211.083] Sleep (dwMilliseconds=0x3e8) [0211.085] Sleep (dwMilliseconds=0x3e8) [0211.087] Sleep (dwMilliseconds=0x3e8) [0211.089] Sleep (dwMilliseconds=0x3e8) [0211.091] Sleep (dwMilliseconds=0x3e8) [0211.093] Sleep (dwMilliseconds=0x3e8) [0211.095] Sleep (dwMilliseconds=0x3e8) [0211.100] Sleep (dwMilliseconds=0x3e8) [0211.111] Sleep (dwMilliseconds=0x3e8) [0211.136] Sleep (dwMilliseconds=0x3e8) [0211.142] Sleep (dwMilliseconds=0x3e8) [0211.144] Sleep (dwMilliseconds=0x3e8) [0211.146] Sleep (dwMilliseconds=0x3e8) [0211.148] Sleep (dwMilliseconds=0x3e8) [0211.150] Sleep (dwMilliseconds=0x3e8) [0211.152] Sleep (dwMilliseconds=0x3e8) [0211.153] Sleep (dwMilliseconds=0x3e8) [0211.155] Sleep (dwMilliseconds=0x3e8) [0211.158] Sleep (dwMilliseconds=0x3e8) [0211.159] Sleep (dwMilliseconds=0x3e8) [0211.161] Sleep (dwMilliseconds=0x3e8) [0211.162] Sleep (dwMilliseconds=0x3e8) [0211.164] Sleep (dwMilliseconds=0x3e8) [0211.166] Sleep (dwMilliseconds=0x3e8) [0211.168] Sleep (dwMilliseconds=0x3e8) [0211.170] Sleep (dwMilliseconds=0x3e8) [0211.172] Sleep (dwMilliseconds=0x3e8) [0211.174] Sleep (dwMilliseconds=0x3e8) [0211.176] Sleep (dwMilliseconds=0x3e8) [0211.178] Sleep (dwMilliseconds=0x3e8) [0211.180] Sleep (dwMilliseconds=0x3e8) [0211.182] Sleep (dwMilliseconds=0x3e8) [0211.184] Sleep (dwMilliseconds=0x3e8) [0211.186] Sleep (dwMilliseconds=0x3e8) [0211.187] Sleep (dwMilliseconds=0x3e8) [0211.188] Sleep (dwMilliseconds=0x3e8) [0211.192] Sleep (dwMilliseconds=0x3e8) [0211.193] Sleep (dwMilliseconds=0x3e8) [0211.195] Sleep (dwMilliseconds=0x3e8) [0211.197] Sleep (dwMilliseconds=0x3e8) [0211.199] Sleep (dwMilliseconds=0x3e8) [0211.201] Sleep (dwMilliseconds=0x3e8) [0211.203] Sleep (dwMilliseconds=0x3e8) [0211.206] Sleep (dwMilliseconds=0x3e8) [0211.211] Sleep (dwMilliseconds=0x3e8) [0211.212] Sleep (dwMilliseconds=0x3e8) [0211.215] Sleep (dwMilliseconds=0x3e8) [0211.217] Sleep (dwMilliseconds=0x3e8) [0211.219] Sleep (dwMilliseconds=0x3e8) [0211.222] Sleep (dwMilliseconds=0x3e8) [0211.224] Sleep (dwMilliseconds=0x3e8) [0211.226] Sleep (dwMilliseconds=0x3e8) [0211.228] Sleep (dwMilliseconds=0x3e8) [0211.230] Sleep (dwMilliseconds=0x3e8) [0211.231] Sleep (dwMilliseconds=0x3e8) [0211.233] Sleep (dwMilliseconds=0x3e8) [0211.235] Sleep (dwMilliseconds=0x3e8) [0211.237] Sleep (dwMilliseconds=0x3e8) [0211.239] Sleep (dwMilliseconds=0x3e8) [0211.241] Sleep (dwMilliseconds=0x3e8) [0211.245] Sleep (dwMilliseconds=0x3e8) [0211.247] Sleep (dwMilliseconds=0x3e8) [0211.249] Sleep (dwMilliseconds=0x3e8) [0211.251] Sleep (dwMilliseconds=0x3e8) [0211.253] Sleep (dwMilliseconds=0x3e8) [0211.255] Sleep (dwMilliseconds=0x3e8) [0211.257] Sleep (dwMilliseconds=0x3e8) [0211.259] Sleep (dwMilliseconds=0x3e8) [0211.261] Sleep (dwMilliseconds=0x3e8) [0211.263] Sleep (dwMilliseconds=0x3e8) [0211.265] Sleep (dwMilliseconds=0x3e8) [0211.267] Sleep (dwMilliseconds=0x3e8) [0211.269] Sleep (dwMilliseconds=0x3e8) [0211.271] Sleep (dwMilliseconds=0x3e8) [0211.273] Sleep (dwMilliseconds=0x3e8) [0211.277] Sleep (dwMilliseconds=0x3e8) [0211.279] Sleep (dwMilliseconds=0x3e8) [0211.290] Sleep (dwMilliseconds=0x3e8) [0211.301] Sleep (dwMilliseconds=0x3e8) [0211.307] Sleep (dwMilliseconds=0x3e8) [0211.309] Sleep (dwMilliseconds=0x3e8) [0211.311] Sleep (dwMilliseconds=0x3e8) [0211.313] Sleep (dwMilliseconds=0x3e8) [0211.315] Sleep (dwMilliseconds=0x3e8) [0211.317] Sleep (dwMilliseconds=0x3e8) [0211.319] Sleep (dwMilliseconds=0x3e8) [0211.321] Sleep (dwMilliseconds=0x3e8) [0211.323] Sleep (dwMilliseconds=0x3e8) [0211.325] Sleep (dwMilliseconds=0x3e8) [0211.327] Sleep (dwMilliseconds=0x3e8) [0211.329] Sleep (dwMilliseconds=0x3e8) [0211.331] Sleep (dwMilliseconds=0x3e8) [0211.333] Sleep (dwMilliseconds=0x3e8) [0211.335] Sleep (dwMilliseconds=0x3e8) [0211.337] Sleep (dwMilliseconds=0x3e8) [0211.339] Sleep (dwMilliseconds=0x3e8) [0211.342] Sleep (dwMilliseconds=0x3e8) [0211.344] Sleep (dwMilliseconds=0x3e8) [0211.346] Sleep (dwMilliseconds=0x3e8) [0211.348] Sleep (dwMilliseconds=0x3e8) [0211.350] Sleep (dwMilliseconds=0x3e8) [0211.352] Sleep (dwMilliseconds=0x3e8) [0211.354] Sleep (dwMilliseconds=0x3e8) [0211.356] Sleep (dwMilliseconds=0x3e8) [0211.358] Sleep (dwMilliseconds=0x3e8) [0211.360] Sleep (dwMilliseconds=0x3e8) [0211.362] Sleep (dwMilliseconds=0x3e8) [0211.364] Sleep (dwMilliseconds=0x3e8) [0211.366] Sleep (dwMilliseconds=0x3e8) [0211.368] Sleep (dwMilliseconds=0x3e8) [0211.370] Sleep (dwMilliseconds=0x3e8) [0211.372] Sleep (dwMilliseconds=0x3e8) [0211.374] Sleep (dwMilliseconds=0x3e8) [0211.376] Sleep (dwMilliseconds=0x3e8) [0211.378] Sleep (dwMilliseconds=0x3e8) [0211.380] Sleep (dwMilliseconds=0x3e8) [0211.382] Sleep (dwMilliseconds=0x3e8) [0211.384] Sleep (dwMilliseconds=0x3e8) [0211.386] Sleep (dwMilliseconds=0x3e8) [0211.388] Sleep (dwMilliseconds=0x3e8) [0211.390] Sleep (dwMilliseconds=0x3e8) [0211.393] Sleep (dwMilliseconds=0x3e8) [0211.395] Sleep (dwMilliseconds=0x3e8) [0211.397] Sleep (dwMilliseconds=0x3e8) [0211.399] Sleep (dwMilliseconds=0x3e8) [0211.401] Sleep (dwMilliseconds=0x3e8) [0211.408] Sleep (dwMilliseconds=0x3e8) [0211.412] Sleep (dwMilliseconds=0x3e8) [0211.413] Sleep (dwMilliseconds=0x3e8) [0211.415] Sleep (dwMilliseconds=0x3e8) [0211.417] Sleep (dwMilliseconds=0x3e8) [0211.419] Sleep (dwMilliseconds=0x3e8) [0211.421] Sleep (dwMilliseconds=0x3e8) [0211.423] Sleep (dwMilliseconds=0x3e8) [0211.425] Sleep (dwMilliseconds=0x3e8) [0211.427] Sleep (dwMilliseconds=0x3e8) [0211.429] Sleep (dwMilliseconds=0x3e8) [0211.431] Sleep (dwMilliseconds=0x3e8) [0211.433] Sleep (dwMilliseconds=0x3e8) [0211.435] Sleep (dwMilliseconds=0x3e8) [0211.437] Sleep (dwMilliseconds=0x3e8) [0211.439] Sleep (dwMilliseconds=0x3e8) [0211.441] Sleep (dwMilliseconds=0x3e8) [0211.443] Sleep (dwMilliseconds=0x3e8) [0211.445] Sleep (dwMilliseconds=0x3e8) [0211.447] Sleep (dwMilliseconds=0x3e8) [0211.449] Sleep (dwMilliseconds=0x3e8) [0211.451] Sleep (dwMilliseconds=0x3e8) [0211.453] Sleep (dwMilliseconds=0x3e8) [0211.455] Sleep (dwMilliseconds=0x3e8) [0211.457] Sleep (dwMilliseconds=0x3e8) [0211.459] Sleep (dwMilliseconds=0x3e8) [0211.460] Sleep (dwMilliseconds=0x3e8) [0211.462] Sleep (dwMilliseconds=0x3e8) [0211.464] Sleep (dwMilliseconds=0x3e8) [0211.466] Sleep (dwMilliseconds=0x3e8) [0211.468] Sleep (dwMilliseconds=0x3e8) [0211.472] Sleep (dwMilliseconds=0x3e8) [0211.476] Sleep (dwMilliseconds=0x3e8) [0211.477] Sleep (dwMilliseconds=0x3e8) [0211.479] Sleep (dwMilliseconds=0x3e8) [0211.481] Sleep (dwMilliseconds=0x3e8) [0211.484] Sleep (dwMilliseconds=0x3e8) [0211.486] Sleep (dwMilliseconds=0x3e8) [0211.488] Sleep (dwMilliseconds=0x3e8) [0211.490] Sleep (dwMilliseconds=0x3e8) [0211.492] Sleep (dwMilliseconds=0x3e8) [0211.494] Sleep (dwMilliseconds=0x3e8) [0211.496] Sleep (dwMilliseconds=0x3e8) [0211.498] Sleep (dwMilliseconds=0x3e8) [0211.500] Sleep (dwMilliseconds=0x3e8) [0211.502] Sleep (dwMilliseconds=0x3e8) [0211.504] Sleep (dwMilliseconds=0x3e8) [0211.506] Sleep (dwMilliseconds=0x3e8) [0211.508] Sleep (dwMilliseconds=0x3e8) [0211.510] Sleep (dwMilliseconds=0x3e8) [0211.512] Sleep (dwMilliseconds=0x3e8) [0211.514] Sleep (dwMilliseconds=0x3e8) [0211.516] Sleep (dwMilliseconds=0x3e8) [0211.518] Sleep (dwMilliseconds=0x3e8) [0211.523] Sleep (dwMilliseconds=0x3e8) [0211.526] Sleep (dwMilliseconds=0x3e8) [0211.527] Sleep (dwMilliseconds=0x3e8) [0211.529] Sleep (dwMilliseconds=0x3e8) [0211.531] Sleep (dwMilliseconds=0x3e8) [0211.533] Sleep (dwMilliseconds=0x3e8) [0211.535] Sleep (dwMilliseconds=0x3e8) [0211.537] Sleep (dwMilliseconds=0x3e8) [0211.538] Sleep (dwMilliseconds=0x3e8) [0211.540] Sleep (dwMilliseconds=0x3e8) [0211.542] Sleep (dwMilliseconds=0x3e8) [0211.544] Sleep (dwMilliseconds=0x3e8) [0211.546] Sleep (dwMilliseconds=0x3e8) [0211.548] Sleep (dwMilliseconds=0x3e8) [0211.549] Sleep (dwMilliseconds=0x3e8) [0211.552] Sleep (dwMilliseconds=0x3e8) [0211.553] Sleep (dwMilliseconds=0x3e8) [0211.554] Sleep (dwMilliseconds=0x3e8) [0211.556] Sleep (dwMilliseconds=0x3e8) [0211.558] Sleep (dwMilliseconds=0x3e8) [0211.562] Sleep (dwMilliseconds=0x3e8) [0211.563] Sleep (dwMilliseconds=0x3e8) [0211.565] Sleep (dwMilliseconds=0x3e8) [0211.567] Sleep (dwMilliseconds=0x3e8) [0211.569] Sleep (dwMilliseconds=0x3e8) [0211.571] Sleep (dwMilliseconds=0x3e8) [0211.573] Sleep (dwMilliseconds=0x3e8) [0211.575] Sleep (dwMilliseconds=0x3e8) [0211.577] Sleep (dwMilliseconds=0x3e8) [0211.579] Sleep (dwMilliseconds=0x3e8) [0211.581] Sleep (dwMilliseconds=0x3e8) [0211.583] Sleep (dwMilliseconds=0x3e8) [0211.585] Sleep (dwMilliseconds=0x3e8) [0211.587] Sleep (dwMilliseconds=0x3e8) [0211.597] Sleep (dwMilliseconds=0x3e8) [0211.598] Sleep (dwMilliseconds=0x3e8) [0211.602] Sleep (dwMilliseconds=0x3e8) [0211.604] Sleep (dwMilliseconds=0x3e8) [0211.606] Sleep (dwMilliseconds=0x3e8) [0211.609] Sleep (dwMilliseconds=0x3e8) [0211.611] Sleep (dwMilliseconds=0x3e8) [0211.613] Sleep (dwMilliseconds=0x3e8) [0211.615] Sleep (dwMilliseconds=0x3e8) [0211.617] Sleep (dwMilliseconds=0x3e8) [0211.619] Sleep (dwMilliseconds=0x3e8) [0211.624] Sleep (dwMilliseconds=0x3e8) [0211.635] Sleep (dwMilliseconds=0x3e8) [0211.640] Sleep (dwMilliseconds=0x3e8) [0211.645] Sleep (dwMilliseconds=0x3e8) [0211.647] Sleep (dwMilliseconds=0x3e8) [0211.649] Sleep (dwMilliseconds=0x3e8) [0211.651] Sleep (dwMilliseconds=0x3e8) [0211.654] Sleep (dwMilliseconds=0x3e8) [0211.659] Sleep (dwMilliseconds=0x3e8) [0211.660] Sleep (dwMilliseconds=0x3e8) [0211.662] Sleep (dwMilliseconds=0x3e8) [0211.664] Sleep (dwMilliseconds=0x3e8) [0211.666] Sleep (dwMilliseconds=0x3e8) [0211.668] Sleep (dwMilliseconds=0x3e8) [0211.670] Sleep (dwMilliseconds=0x3e8) [0211.672] Sleep (dwMilliseconds=0x3e8) [0211.674] Sleep (dwMilliseconds=0x3e8) [0211.676] Sleep (dwMilliseconds=0x3e8) [0211.677] Sleep (dwMilliseconds=0x3e8) [0211.679] Sleep (dwMilliseconds=0x3e8) [0211.681] Sleep (dwMilliseconds=0x3e8) [0211.685] Sleep (dwMilliseconds=0x3e8) [0211.687] Sleep (dwMilliseconds=0x3e8) [0211.689] Sleep (dwMilliseconds=0x3e8) [0211.691] Sleep (dwMilliseconds=0x3e8) [0211.693] Sleep (dwMilliseconds=0x3e8) [0211.695] Sleep (dwMilliseconds=0x3e8) [0211.697] Sleep (dwMilliseconds=0x3e8) [0211.699] Sleep (dwMilliseconds=0x3e8) [0211.701] Sleep (dwMilliseconds=0x3e8) [0211.703] Sleep (dwMilliseconds=0x3e8) [0211.705] Sleep (dwMilliseconds=0x3e8) [0211.707] Sleep (dwMilliseconds=0x3e8) [0211.710] Sleep (dwMilliseconds=0x3e8) [0211.712] Sleep (dwMilliseconds=0x3e8) [0211.714] Sleep (dwMilliseconds=0x3e8) [0211.716] Sleep (dwMilliseconds=0x3e8) [0211.718] Sleep (dwMilliseconds=0x3e8) [0211.720] Sleep (dwMilliseconds=0x3e8) [0211.726] Sleep (dwMilliseconds=0x3e8) [0211.728] Sleep (dwMilliseconds=0x3e8) [0211.730] Sleep (dwMilliseconds=0x3e8) [0211.732] Sleep (dwMilliseconds=0x3e8) [0211.734] Sleep (dwMilliseconds=0x3e8) [0211.736] Sleep (dwMilliseconds=0x3e8) [0211.738] Sleep (dwMilliseconds=0x3e8) [0211.740] Sleep (dwMilliseconds=0x3e8) [0211.742] Sleep (dwMilliseconds=0x3e8) [0211.770] Sleep (dwMilliseconds=0x3e8) [0211.772] Sleep (dwMilliseconds=0x3e8) [0211.776] Sleep (dwMilliseconds=0x3e8) [0211.778] Sleep (dwMilliseconds=0x3e8) [0211.780] Sleep (dwMilliseconds=0x3e8) [0211.781] Sleep (dwMilliseconds=0x3e8) [0211.786] Sleep (dwMilliseconds=0x3e8) [0211.788] Sleep (dwMilliseconds=0x3e8) [0211.790] Sleep (dwMilliseconds=0x3e8) [0211.792] Sleep (dwMilliseconds=0x3e8) [0211.794] Sleep (dwMilliseconds=0x3e8) [0211.796] Sleep (dwMilliseconds=0x3e8) [0211.798] Sleep (dwMilliseconds=0x3e8) [0211.800] Sleep (dwMilliseconds=0x3e8) [0211.802] Sleep (dwMilliseconds=0x3e8) [0211.804] Sleep (dwMilliseconds=0x3e8) [0211.806] Sleep (dwMilliseconds=0x3e8) [0211.808] Sleep (dwMilliseconds=0x3e8) [0211.811] Sleep (dwMilliseconds=0x3e8) [0211.813] Sleep (dwMilliseconds=0x3e8) [0211.815] Sleep (dwMilliseconds=0x3e8) [0211.817] Sleep (dwMilliseconds=0x3e8) [0211.844] Sleep (dwMilliseconds=0x3e8) [0211.846] Sleep (dwMilliseconds=0x3e8) [0211.848] Sleep (dwMilliseconds=0x3e8) [0211.850] Sleep (dwMilliseconds=0x3e8) [0211.852] Sleep (dwMilliseconds=0x3e8) [0211.854] Sleep (dwMilliseconds=0x3e8) [0211.856] Sleep (dwMilliseconds=0x3e8) [0211.858] Sleep (dwMilliseconds=0x3e8) [0211.860] Sleep (dwMilliseconds=0x3e8) [0211.862] Sleep (dwMilliseconds=0x3e8) [0211.864] Sleep (dwMilliseconds=0x3e8) [0211.866] Sleep (dwMilliseconds=0x3e8) [0211.868] Sleep (dwMilliseconds=0x3e8) [0211.870] Sleep (dwMilliseconds=0x3e8) [0211.897] Sleep (dwMilliseconds=0x3e8) [0211.899] Sleep (dwMilliseconds=0x3e8) [0211.963] Sleep (dwMilliseconds=0x3e8) [0211.971] Sleep (dwMilliseconds=0x3e8) [0211.973] Sleep (dwMilliseconds=0x3e8) [0211.975] Sleep (dwMilliseconds=0x3e8) [0211.977] Sleep (dwMilliseconds=0x3e8) [0211.983] Sleep (dwMilliseconds=0x3e8) [0211.985] Sleep (dwMilliseconds=0x3e8) [0211.987] Sleep (dwMilliseconds=0x3e8) [0211.992] Sleep (dwMilliseconds=0x3e8) [0211.994] Sleep (dwMilliseconds=0x3e8) [0211.996] Sleep (dwMilliseconds=0x3e8) [0211.998] Sleep (dwMilliseconds=0x3e8) [0212.000] Sleep (dwMilliseconds=0x3e8) [0212.002] Sleep (dwMilliseconds=0x3e8) [0212.004] Sleep (dwMilliseconds=0x3e8) [0212.006] Sleep (dwMilliseconds=0x3e8) [0212.008] Sleep (dwMilliseconds=0x3e8) [0212.010] Sleep (dwMilliseconds=0x3e8) [0212.013] Sleep (dwMilliseconds=0x3e8) [0212.014] Sleep (dwMilliseconds=0x3e8) [0212.016] Sleep (dwMilliseconds=0x3e8) [0212.036] Sleep (dwMilliseconds=0x3e8) [0212.037] Sleep (dwMilliseconds=0x3e8) [0212.039] Sleep (dwMilliseconds=0x3e8) [0212.041] Sleep (dwMilliseconds=0x3e8) [0212.043] Sleep (dwMilliseconds=0x3e8) [0212.045] Sleep (dwMilliseconds=0x3e8) [0212.047] Sleep (dwMilliseconds=0x3e8) [0212.049] Sleep (dwMilliseconds=0x3e8) [0212.051] Sleep (dwMilliseconds=0x3e8) [0212.053] Sleep (dwMilliseconds=0x3e8) [0212.055] Sleep (dwMilliseconds=0x3e8) [0212.056] Sleep (dwMilliseconds=0x3e8) [0212.058] Sleep (dwMilliseconds=0x3e8) [0212.060] Sleep (dwMilliseconds=0x3e8) [0212.062] Sleep (dwMilliseconds=0x3e8) [0212.065] Sleep (dwMilliseconds=0x3e8) [0212.067] Sleep (dwMilliseconds=0x3e8) [0212.069] Sleep (dwMilliseconds=0x3e8) [0212.071] Sleep (dwMilliseconds=0x3e8) [0212.073] Sleep (dwMilliseconds=0x3e8) [0212.076] Sleep (dwMilliseconds=0x3e8) [0212.078] Sleep (dwMilliseconds=0x3e8) [0212.080] Sleep (dwMilliseconds=0x3e8) [0212.082] Sleep (dwMilliseconds=0x3e8) [0212.084] Sleep (dwMilliseconds=0x3e8) [0212.086] Sleep (dwMilliseconds=0x3e8) [0212.088] Sleep (dwMilliseconds=0x3e8) [0212.090] Sleep (dwMilliseconds=0x3e8) [0212.092] Sleep (dwMilliseconds=0x3e8) [0212.094] Sleep (dwMilliseconds=0x3e8) [0212.096] Sleep (dwMilliseconds=0x3e8) [0212.098] Sleep (dwMilliseconds=0x3e8) [0212.100] Sleep (dwMilliseconds=0x3e8) [0212.102] Sleep (dwMilliseconds=0x3e8) [0212.104] Sleep (dwMilliseconds=0x3e8) [0212.108] Sleep (dwMilliseconds=0x3e8) [0212.112] Sleep (dwMilliseconds=0x3e8) [0212.115] Sleep (dwMilliseconds=0x3e8) [0212.117] Sleep (dwMilliseconds=0x3e8) [0212.122] Sleep (dwMilliseconds=0x3e8) [0212.124] Sleep (dwMilliseconds=0x3e8) [0212.126] Sleep (dwMilliseconds=0x3e8) [0212.128] Sleep (dwMilliseconds=0x3e8) [0212.132] Sleep (dwMilliseconds=0x3e8) [0212.136] Sleep (dwMilliseconds=0x3e8) [0212.138] Sleep (dwMilliseconds=0x3e8) [0212.140] Sleep (dwMilliseconds=0x3e8) [0212.142] Sleep (dwMilliseconds=0x3e8) [0212.144] Sleep (dwMilliseconds=0x3e8) [0212.146] Sleep (dwMilliseconds=0x3e8) [0212.148] Sleep (dwMilliseconds=0x3e8) [0212.150] Sleep (dwMilliseconds=0x3e8) [0212.154] Sleep (dwMilliseconds=0x3e8) [0212.156] Sleep (dwMilliseconds=0x3e8) [0212.158] Sleep (dwMilliseconds=0x3e8) [0212.160] Sleep (dwMilliseconds=0x3e8) [0212.162] Sleep (dwMilliseconds=0x3e8) [0212.164] Sleep (dwMilliseconds=0x3e8) [0212.167] Sleep (dwMilliseconds=0x3e8) [0212.170] Sleep (dwMilliseconds=0x3e8) [0212.172] Sleep (dwMilliseconds=0x3e8) [0212.174] Sleep (dwMilliseconds=0x3e8) [0212.176] Sleep (dwMilliseconds=0x3e8) [0212.179] Sleep (dwMilliseconds=0x3e8) [0212.181] Sleep (dwMilliseconds=0x3e8) [0212.185] Sleep (dwMilliseconds=0x3e8) [0212.188] Sleep (dwMilliseconds=0x3e8) [0212.191] Sleep (dwMilliseconds=0x3e8) [0212.193] Sleep (dwMilliseconds=0x3e8) [0212.195] Sleep (dwMilliseconds=0x3e8) [0212.198] Sleep (dwMilliseconds=0x3e8) [0212.201] Sleep (dwMilliseconds=0x3e8) [0212.204] Sleep (dwMilliseconds=0x3e8) [0212.208] Sleep (dwMilliseconds=0x3e8) [0212.210] Sleep (dwMilliseconds=0x3e8) [0212.213] Sleep (dwMilliseconds=0x3e8) [0212.217] Sleep (dwMilliseconds=0x3e8) [0212.220] Sleep (dwMilliseconds=0x3e8) [0212.222] Sleep (dwMilliseconds=0x3e8) [0212.224] Sleep (dwMilliseconds=0x3e8) [0212.226] Sleep (dwMilliseconds=0x3e8) [0212.227] Sleep (dwMilliseconds=0x3e8) [0212.229] Sleep (dwMilliseconds=0x3e8) [0212.232] Sleep (dwMilliseconds=0x3e8) [0212.235] Sleep (dwMilliseconds=0x3e8) [0212.244] Sleep (dwMilliseconds=0x3e8) [0212.249] Sleep (dwMilliseconds=0x3e8) [0212.251] Sleep (dwMilliseconds=0x3e8) [0212.253] Sleep (dwMilliseconds=0x3e8) [0212.256] Sleep (dwMilliseconds=0x3e8) [0212.259] Sleep (dwMilliseconds=0x3e8) [0212.262] Sleep (dwMilliseconds=0x3e8) [0212.264] Sleep (dwMilliseconds=0x3e8) [0212.266] Sleep (dwMilliseconds=0x3e8) [0212.270] Sleep (dwMilliseconds=0x3e8) [0212.272] Sleep (dwMilliseconds=0x3e8) [0212.274] Sleep (dwMilliseconds=0x3e8) [0212.276] Sleep (dwMilliseconds=0x3e8) [0212.278] Sleep (dwMilliseconds=0x3e8) [0212.299] Sleep (dwMilliseconds=0x3e8) [0212.300] Sleep (dwMilliseconds=0x3e8) [0212.302] Sleep (dwMilliseconds=0x3e8) [0212.306] Sleep (dwMilliseconds=0x3e8) [0212.308] Sleep (dwMilliseconds=0x3e8) [0212.310] Sleep (dwMilliseconds=0x3e8) [0212.312] Sleep (dwMilliseconds=0x3e8) [0212.315] Sleep (dwMilliseconds=0x3e8) [0212.317] Sleep (dwMilliseconds=0x3e8) [0212.319] Sleep (dwMilliseconds=0x3e8) [0212.322] Sleep (dwMilliseconds=0x3e8) [0212.350] Sleep (dwMilliseconds=0x3e8) [0212.351] Sleep (dwMilliseconds=0x3e8) [0212.353] Sleep (dwMilliseconds=0x3e8) [0212.355] Sleep (dwMilliseconds=0x3e8) [0212.358] Sleep (dwMilliseconds=0x3e8) [0212.360] Sleep (dwMilliseconds=0x3e8) [0212.362] Sleep (dwMilliseconds=0x3e8) [0212.364] Sleep (dwMilliseconds=0x3e8) [0212.366] Sleep (dwMilliseconds=0x3e8) [0212.368] Sleep (dwMilliseconds=0x3e8) [0212.370] Sleep (dwMilliseconds=0x3e8) [0212.372] Sleep (dwMilliseconds=0x3e8) [0212.374] Sleep (dwMilliseconds=0x3e8) [0212.376] Sleep (dwMilliseconds=0x3e8) [0212.378] Sleep (dwMilliseconds=0x3e8) [0212.380] Sleep (dwMilliseconds=0x3e8) [0212.384] Sleep (dwMilliseconds=0x3e8) [0212.385] Sleep (dwMilliseconds=0x3e8) [0212.387] Sleep (dwMilliseconds=0x3e8) [0212.389] Sleep (dwMilliseconds=0x3e8) [0212.392] Sleep (dwMilliseconds=0x3e8) [0212.393] Sleep (dwMilliseconds=0x3e8) [0212.395] Sleep (dwMilliseconds=0x3e8) [0212.397] Sleep (dwMilliseconds=0x3e8) [0212.399] Sleep (dwMilliseconds=0x3e8) [0212.401] Sleep (dwMilliseconds=0x3e8) [0212.403] Sleep (dwMilliseconds=0x3e8) [0212.405] Sleep (dwMilliseconds=0x3e8) [0212.407] Sleep (dwMilliseconds=0x3e8) [0212.409] Sleep (dwMilliseconds=0x3e8) [0212.411] Sleep (dwMilliseconds=0x3e8) [0212.413] Sleep (dwMilliseconds=0x3e8) [0212.415] Sleep (dwMilliseconds=0x3e8) [0212.417] Sleep (dwMilliseconds=0x3e8) [0212.421] Sleep (dwMilliseconds=0x3e8) [0212.439] Sleep (dwMilliseconds=0x3e8) [0212.440] Sleep (dwMilliseconds=0x3e8) [0212.442] Sleep (dwMilliseconds=0x3e8) [0212.444] Sleep (dwMilliseconds=0x3e8) [0212.446] Sleep (dwMilliseconds=0x3e8) [0212.448] Sleep (dwMilliseconds=0x3e8) [0212.450] Sleep (dwMilliseconds=0x3e8) [0212.452] Sleep (dwMilliseconds=0x3e8) [0212.454] Sleep (dwMilliseconds=0x3e8) [0212.456] Sleep (dwMilliseconds=0x3e8) [0212.458] Sleep (dwMilliseconds=0x3e8) [0212.460] Sleep (dwMilliseconds=0x3e8) [0212.464] Sleep (dwMilliseconds=0x3e8) [0212.465] Sleep (dwMilliseconds=0x3e8) [0212.467] Sleep (dwMilliseconds=0x3e8) [0212.469] Sleep (dwMilliseconds=0x3e8) [0212.478] Sleep (dwMilliseconds=0x3e8) [0212.485] Sleep (dwMilliseconds=0x3e8) [0212.498] Sleep (dwMilliseconds=0x3e8) [0212.500] Sleep (dwMilliseconds=0x3e8) [0212.502] Sleep (dwMilliseconds=0x3e8) [0212.505] Sleep (dwMilliseconds=0x3e8) [0212.507] Sleep (dwMilliseconds=0x3e8) [0212.511] Sleep (dwMilliseconds=0x3e8) [0212.520] Sleep (dwMilliseconds=0x3e8) [0212.523] Sleep (dwMilliseconds=0x3e8) [0212.526] Sleep (dwMilliseconds=0x3e8) [0212.528] Sleep (dwMilliseconds=0x3e8) [0212.531] Sleep (dwMilliseconds=0x3e8) [0212.542] Sleep (dwMilliseconds=0x3e8) [0212.544] Sleep (dwMilliseconds=0x3e8) [0212.555] Sleep (dwMilliseconds=0x3e8) [0212.634] Sleep (dwMilliseconds=0x3e8) Thread: id = 3 os_tid = 0xae4 Thread: id = 5 os_tid = 0x140 [0067.950] GetCurrentThread () returned 0xfffffffe [0067.950] SetThreadPriority (hThread=0xfffffffe, nPriority=256) returned 0 [0067.951] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x8c) returned 0x48d658 [0067.952] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x0, Size=0x104) returned 0x48bf90 [0067.953] GetProcessHeap () returned 0x480000 [0067.953] RtlAllocateHeap (HeapHandle=0x480000, Flags=0x8, Size=0x1fc20) returned 0x491fe8 [0067.962] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x40, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1fc00, lpName=0x0) returned 0xc4 [0067.962] MapViewOfFile (hFileMappingObject=0xc4, dwDesiredAccess=0xf003f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x1fc00) returned 0x440000 [0067.969] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75520000 [0067.969] GetProcAddress (hModule=0x75520000, lpProcName="VirtualAllocEx") returned 0x75562730 [0067.969] GetProcAddress (hModule=0x75520000, lpProcName="VirtualProtect") returned 0x75537a50 [0067.969] GetProcAddress (hModule=0x75520000, lpProcName="GetModuleHandleA") returned 0x755399f0 [0067.969] GetProcAddress (hModule=0x75520000, lpProcName="FreeLibrary") returned 0x75539f50 [0067.969] GetProcAddress (hModule=0x75520000, lpProcName="IsBadReadPtr") returned 0x75532510 [0067.969] VirtualProtect (in: lpAddress=0x4406fc, dwSize=0x1e87c, flNewProtect=0x4, lpflOldProtect=0x0 | out: lpflOldProtect=0x0) returned 0 [0067.970] VirtualAllocEx (hProcess=0xffffffff, lpAddress=0x0, dwSize=0x22000, flAllocationType=0x3000, flProtect=0x40) returned 0x960000 [0067.974] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75520000 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="CloseHandle") returned 0x75546630 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="lstrcmpiW") returned 0x75537590 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="Sleep") returned 0x75537990 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="VerSetConditionMask") returned 0x771b1a40 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="VerifyVersionInfoW") returned 0x75538c30 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="lstrcmpA") returned 0x7553cc30 [0067.974] GetProcAddress (hModule=0x75520000, lpProcName="SetThreadPriority") returned 0x75539990 [0067.974] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x742b0000 [0067.975] GetProcAddress (hModule=0x742b0000, lpProcName="MessageBoxW") returned 0x743301f0 [0067.975] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x74130000 [0070.849] GetProcAddress (hModule=0x74130000, lpProcName=0x2) returned 0x74149c90 [0070.850] GetProcAddress (hModule=0x74130000, lpProcName=0x6) returned 0x74149d40 [0070.850] GetProcAddress (hModule=0x74130000, lpProcName=0x8) returned 0x74142590 [0070.851] GetProcAddress (hModule=0x74130000, lpProcName=0x9) returned 0x74149570 [0070.864] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0070.868] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0070.868] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLIPFORMAT_UserFree") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLIPFORMAT_UserMarshal") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLIPFORMAT_UserSize") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLIPFORMAT_UserUnmarshal") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLSIDFromOle1Class") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLSIDFromProgID") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CLSIDFromString") returned 1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer2_Connect") returned -1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer2_Disconnect") returned -1 [0070.871] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer2_Release") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_AddRef") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_Connect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_Disconnect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_Invoke") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_QueryInterface") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdAsyncStubBuffer_Release") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer2_Connect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer2_CountRefs") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer2_Disconnect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer2_QueryInterface") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_AddRef") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_Connect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_CountRefs") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_DebugServerQueryInterface") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_DebugServerRelease") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_Disconnect") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_Invoke") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_IsIIDSupported") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CStdStubBuffer_QueryInterface") returned -1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CleanupComl2StateInAllTls") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CleanupOleStateInAllTls") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CleanupTlsComl2State") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CleanupTlsOleState") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="ClearCleanupFlag") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoAddRefServerProcess") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoAllowUnmarshalerCLSID") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCancelCall") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCopyProxy") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateErrorInfo") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateFreeThreadedMarshaler") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateGuid") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateInstance") returned 1 [0070.872] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateInstanceEx") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateInstanceFromApp") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoCreateObjectInContext") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDeactivateObject") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDecodeProxy") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDecrementMTAUsage") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDisableCallCancellation") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDisconnectContext") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoDisconnectObject") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoEnableCallCancellation") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoFreeUnusedLibraries") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoFreeUnusedLibrariesEx") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetActivationState") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetApartmentID") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetApartmentType") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCallContext") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCallState") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCallerTID") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCancelObject") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetClassObject") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetClassVersion") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetContextToken") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCurrentLogicalThreadId") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetCurrentProcess") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetDefaultContext") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetErrorInfo") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetInstanceFromFile") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetInstanceFromIStorage") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetInterfaceAndReleaseStream") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetMalloc") returned 1 [0070.873] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetMarshalSizeMax") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetModuleType") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetObjectContext") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetPSClsid") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetProcessIdentifier") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetStandardMarshal") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetStdMarshalEx") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetSystemSecurityPermissions") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoGetTreatAsClass") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoImpersonateClient") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoIncrementMTAUsage") returned 1 [0070.874] lstrcmpA (lpString1="CoInitializeEx", lpString2="CoInitializeEx") returned 0 [0070.874] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0070.874] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0070.874] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0071.303] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0071.303] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x75070000 [0072.181] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0072.181] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0072.181] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0072.968] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x74130000 [0072.968] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x6f020000 [0073.977] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0073.977] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0073.977] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0073.977] LoadLibraryA (lpLibFileName="rstrtmgr.dll") returned 0x6efc0000 [0074.932] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0074.933] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0074.933] LoadLibraryA (lpLibFileName="rstrtmgr.dll") returned 0x6efc0000 [0074.933] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0074.933] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0074.934] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0074.934] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0074.934] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0074.934] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75600000 [0080.175] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x74130000 [0080.175] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.176] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.176] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.176] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.176] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.176] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.176] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.176] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0080.176] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLIPFORMAT_UserFree") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLIPFORMAT_UserMarshal") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLIPFORMAT_UserSize") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLIPFORMAT_UserUnmarshal") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLSIDFromOle1Class") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLSIDFromProgID") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CLSIDFromString") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer2_Connect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer2_Disconnect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer2_Release") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_AddRef") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_Connect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_Disconnect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_Invoke") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_QueryInterface") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdAsyncStubBuffer_Release") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer2_Connect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer2_CountRefs") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer2_Disconnect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer2_QueryInterface") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_AddRef") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_Connect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_CountRefs") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_DebugServerQueryInterface") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_DebugServerRelease") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_Disconnect") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_Invoke") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_IsIIDSupported") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CStdStubBuffer_QueryInterface") returned -1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CleanupComl2StateInAllTls") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CleanupOleStateInAllTls") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CleanupTlsComl2State") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CleanupTlsOleState") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="ClearCleanupFlag") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CoAddRefServerProcess") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CoAllowUnmarshalerCLSID") returned 1 [0080.177] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCancelCall") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCopyProxy") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateErrorInfo") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateFreeThreadedMarshaler") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateGuid") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateInstance") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateInstanceEx") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateInstanceFromApp") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoCreateObjectInContext") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDeactivateObject") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDecodeProxy") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDecrementMTAUsage") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDisableCallCancellation") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDisconnectContext") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoDisconnectObject") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoEnableCallCancellation") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoFreeUnusedLibraries") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoFreeUnusedLibrariesEx") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetActivationState") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetApartmentID") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetApartmentType") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCallContext") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCallState") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCallerTID") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCancelObject") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetClassObject") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetClassVersion") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetContextToken") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCurrentLogicalThreadId") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetCurrentProcess") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetDefaultContext") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetErrorInfo") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetInstanceFromFile") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetInstanceFromIStorage") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetInterfaceAndReleaseStream") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetMalloc") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetMarshalSizeMax") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetModuleType") returned 1 [0080.178] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetObjectContext") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetPSClsid") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetProcessIdentifier") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetStandardMarshal") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetStdMarshalEx") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetSystemSecurityPermissions") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoGetTreatAsClass") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoImpersonateClient") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoIncrementMTAUsage") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoInitializeEx") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoInitializeSecurity") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoInitializeWOW") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoInvalidateRemoteMachineBindings") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoIsHandlerConnected") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoLockObjectExternal") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoMarshalHresult") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoMarshalInterThreadInterfaceInStream") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoMarshalInterface") returned 1 [0080.179] lstrcmpA (lpString1="CoUninitialize", lpString2="CoPopServiceDomain") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoPushServiceDomain") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoQueryAuthenticationServices") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoQueryClientBlanket") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoQueryProxyBlanket") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoReactivateObject") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterActivationFilter") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterClassObject") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterInitializeSpy") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterMallocSpy") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterMessageFilter") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterPSClsid") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterSurrogate") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRegisterSurrogateEx") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoReleaseMarshalData") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoReleaseServerProcess") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoResumeClassObjects") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRetireServer") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRevertToSelf") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRevokeClassObject") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRevokeInitializeSpy") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoRevokeMallocSpy") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoSetCancelObject") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoSetErrorInfo") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoSetProxyBlanket") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoSuspendClassObjects") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoSwitchCallContext") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoTaskMemAlloc") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoTaskMemFree") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoTaskMemRealloc") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoTestCancel") returned 1 [0080.180] lstrcmpA (lpString1="CoUninitialize", lpString2="CoUninitialize") returned 0 [0080.180] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.181] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x6f350000 [0080.361] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.361] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.361] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.361] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.362] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.362] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.362] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.362] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.362] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.362] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.362] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.363] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.363] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75600000 [0080.363] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x74080000 [0080.499] LoadLibraryA (lpLibFileName="SAMCLI") returned 0x6f330000 [0080.585] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGetDisplayInformationIndex") returned 1 [0080.585] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupAdd") returned 1 [0080.585] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupAddUser") returned 1 [0080.585] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupDel") returned 1 [0080.585] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupDelUser") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupEnum") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupGetInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupGetUsers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupSetInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetGroupSetUsers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupAdd") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupAddMember") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupAddMembers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupDel") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupDelMember") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupDelMembers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupEnum") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupGetInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupGetMembers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupSetInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetLocalGroupSetMembers") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetQueryDisplayInformation") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserAdd") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserChangePassword") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserDel") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserEnum") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserGetGroups") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserGetInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserGetInternetIdentityInfo") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserGetLocalGroups") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserModalsGet") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserModalsSet") returned 1 [0080.586] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserSetGroups") returned 1 [0080.587] lstrcmpA (lpString1="NetUserSetInfo", lpString2="NetUserSetInfo") returned 0 [0080.587] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.587] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.587] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x74130000 [0080.587] LoadLibraryA (lpLibFileName="rstrtmgr.dll") returned 0x6efc0000 [0080.588] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.588] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.588] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.588] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.589] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.589] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x74080000 [0080.589] LoadLibraryA (lpLibFileName="SRVCLI") returned 0x6f310000 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="I_NetDfsGetVersion") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="I_NetServerSetServiceBits") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="I_NetServerSetServiceBitsEx") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalAliasGet") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalFileClose") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalFileEnum") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalFileEnumEx") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalFileGetInfo") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalFileGetInfoEx") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalSessionDel") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalSessionEnum") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalSessionEnumEx") returned 1 [0080.728] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalSessionGetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalSessionGetInfoEx") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareAdd") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareDelEx") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareEnumEx") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareGetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareGetInfoEx") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="LocalShareSetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetConnectionEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetFileClose") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetFileEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetFileGetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetRemoteTOD") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerAliasAdd") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerAliasDel") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerAliasEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerComputerNameAdd") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerComputerNameDel") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerDiskEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerGetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerSetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerStatisticsGet") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerTransportAdd") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerTransportAddEx") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerTransportDel") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetServerTransportEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetSessionDel") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetSessionEnum") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetSessionGetInfo") returned 1 [0080.729] lstrcmpA (lpString1="NetShareAdd", lpString2="NetShareAdd") returned 0 [0080.729] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.730] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.730] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.730] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.730] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.730] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.730] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x74080000 [0080.730] LoadLibraryA (lpLibFileName="SRVCLI") returned 0x6f310000 [0080.730] lstrcmpA (lpString1="NetShareEnum", lpString2="I_NetDfsGetVersion") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="I_NetServerSetServiceBits") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="I_NetServerSetServiceBitsEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalAliasGet") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalFileClose") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalFileEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalFileEnumEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalFileGetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalFileGetInfoEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalSessionDel") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalSessionEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalSessionEnumEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalSessionGetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalSessionGetInfoEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareAdd") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareDelEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareEnumEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareGetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareGetInfoEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="LocalShareSetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetConnectionEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetFileClose") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetFileEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetFileGetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetRemoteTOD") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerAliasAdd") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerAliasDel") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerAliasEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerComputerNameAdd") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerComputerNameDel") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerDiskEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerGetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerSetInfo") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerStatisticsGet") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerTransportAdd") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerTransportAddEx") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerTransportDel") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetServerTransportEnum") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetSessionDel") returned 1 [0080.731] lstrcmpA (lpString1="NetShareEnum", lpString2="NetSessionEnum") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetSessionGetInfo") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareAdd") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareCheck") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareDel") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareDelEx") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareDelSticky") returned 1 [0080.732] lstrcmpA (lpString1="NetShareEnum", lpString2="NetShareEnum") returned 0 [0080.732] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.732] LoadLibraryA (lpLibFileName="rstrtmgr.dll") returned 0x6efc0000 [0080.732] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.732] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x6f020000 [0080.732] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0080.732] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0080.733] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0080.733] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0080.733] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.733] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.733] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.733] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.734] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.734] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.734] LoadLibraryA (lpLibFileName="crypt32.dll") returned 0x75070000 [0080.734] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.734] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x6f350000 [0080.734] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.734] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.735] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.735] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.735] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.735] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.735] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.735] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.736] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0080.736] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0080.736] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.736] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.736] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.736] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75600000 [0080.737] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.737] LoadLibraryA (lpLibFileName="shlwapi.dll") returned 0x744c0000 [0080.737] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x75600000 [0080.737] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.737] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.737] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.738] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x6f350000 [0080.738] LoadLibraryA (lpLibFileName="user32.dll") returned 0x742b0000 [0080.738] LoadLibraryA (lpLibFileName="netapi32.dll") returned 0x74080000 [0080.738] LoadLibraryA (lpLibFileName="NETUTILS") returned 0x6efb0000 [0080.952] LoadLibraryA (lpLibFileName="winhttp.dll") returned 0x713f0000 [0080.953] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x752d0000 [0080.953] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x74dc0000 [0080.953] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x76a00000 [0080.953] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.953] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.954] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x74ed0000 [0080.964] SetErrorMode (uMode=0x1) returned 0x0 [0080.965] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0xe00000 [0080.974] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70f3) returned 0x11f85a8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff6a8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff6c8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff6e8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff708 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff728 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff748 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff768 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff788 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff7a8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff7c8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff7e8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff808 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff828 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff848 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff868 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff888 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff8a8 [0080.977] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff8c8 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffc30 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffbb0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffc70 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffa10 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff950 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffb90 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff9f0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffbd0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffc90 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffa50 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffbf0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffa30 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff9b0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffc10 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff970 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff910 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffa70 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffc50 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffcb0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffaf0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff930 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffad0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff9d0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffa90 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ff990 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffab0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffcd0 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffb10 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffb30 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffb50 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x11ffb70 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cd20 [0080.978] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cc80 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cc00 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cf20 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cf40 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cc40 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cca0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cd60 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cf60 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ccc0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ce00 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cd40 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cda0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cf80 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cc60 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ce40 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ce60 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cd80 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ce20 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cfa0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cce0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cdc0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cd00 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cde0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ce80 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cea0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cec0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cee0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cf00 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cc20 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c860 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cbc0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c8e0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c920 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cb80 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ca60 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c8c0 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c900 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c880 [0080.979] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ca20 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cb40 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c9a0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cbe0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cb60 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c940 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ca80 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ca00 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117ca40 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117caa0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cba0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cac0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c800 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c960 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c980 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c9c0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c840 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c8a0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c820 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117c9e0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cb20 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cae0 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117cb00 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d448 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d748 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d408 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d608 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d4e8 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d4a8 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d4c8 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d708 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d508 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d528 [0080.980] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d548 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d728 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d768 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d488 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d788 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d428 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d5c8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d568 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d468 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d588 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d5a8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d5e8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d7a8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d668 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d628 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d648 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d6e8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x18) returned 0x117d6c8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x127) returned 0x11ffcf0 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x2d) returned 0x11ffe20 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3d) returned 0x11ffe58 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5) returned 0x11ffea0 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x30) returned 0x11ffeb0 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x11ffee8 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe) returned 0x11fff38 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x11fff50 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x11fff60 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x11fff70 [0080.981] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11) returned 0x117d688 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x11fff88 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7) returned 0x11fffa0 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x11fffb0 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x11fffc8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117d7e0 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1a) returned 0x117d7f8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x14) returned 0x117d6a8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5) returned 0x117d820 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117d830 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117d848 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117d858 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117d868 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117d880 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x2c) returned 0x117d898 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117d8d0 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa) returned 0x117d8e0 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x117d8f8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117d910 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf) returned 0x117d928 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117d940 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x117d958 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x117d970 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb) returned 0x117d988 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb) returned 0x117d9c8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117dae8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc4) returned 0x117dba8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dc78 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dc88 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5) returned 0x117dc98 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117dca8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dcb8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dcc8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dcd8 [0080.982] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dce8 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dcf8 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117def0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de10 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de40 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117df00 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd90 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd30 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de60 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe) returned 0x117db00 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117de20 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117ddf0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dda0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd80 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de30 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de50 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de70 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117de80 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117deb0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117ddb0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd70 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd40 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dec0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dd50 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117ddc0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de00 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117de90 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117dd60 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dea0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117ded0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dee0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117ddd0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa) returned 0x117da58 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117db30 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117dde0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5) returned 0x117e250 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e180 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e160 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e2c0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e190 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e2d0 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e260 [0080.983] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e2e0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7) returned 0x117e1b0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x117e318 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7) returned 0x117e1a0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117dad0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117e230 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117e270 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117d9e0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e240 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e220 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117e210 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e290 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117e2f0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e300 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e280 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7) returned 0x117e140 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6) returned 0x117e1c0 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd) returned 0x117da10 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb) returned 0x117d9f8 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x117db60 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117db18 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9) returned 0x117db48 [0080.984] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11) returned 0x117d188 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffe20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 45 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffe20, cbMultiByte=-1, lpWideCharStr=0x1184f30, cchWideChar=45 | out: lpWideCharStr="9/AgyLvWEviWbvuayR2k0Q140e9LZJ5hwrmto/zCyFM=") returned 45 [0080.985] CryptStringToBinaryW (in: pszString="9/AgyLvWEviWbvuayR2k0Q140e9LZJ5hwrmto/zCyFM=", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x43fca0, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x43fca0, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0080.985] CryptStringToBinaryW (in: pszString="9/AgyLvWEviWbvuayR2k0Q140e9LZJ5hwrmto/zCyFM=", cchString=0x0, dwFlags=0x1, pbBinary=0x1184f98, pcbBinary=0x43fca0, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1184f98, pcbBinary=0x43fca0, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0080.985] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1184f30) returned 1 [0080.985] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1184f98) returned 1 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffe58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 61 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffe58, cbMultiByte=-1, lpWideCharStr=0x1184f30, cchWideChar=61 | out: lpWideCharStr="$2a$12$prOX/4eKl8zrpGSC5lnHPecevs5NOckOUW5r3s4JJYDnZZSghvBkq") returned 61 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffea0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0080.985] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11ffea0, cbMultiByte=-1, lpWideCharStr=0x117da28, cchWideChar=5 | out: lpWideCharStr="8254") returned 5 [0080.985] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2810000 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff38, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff38, cbMultiByte=-1, lpWideCharStr=0x1184fb8, cchWideChar=14 | out: lpWideCharStr="program files") returned 14 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff50, cbMultiByte=-1, lpWideCharStr=0x117da70, cchWideChar=8 | out: lpWideCharStr="appdata") returned 8 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff60, cbMultiByte=-1, lpWideCharStr=0x117da88, cchWideChar=8 | out: lpWideCharStr="mozilla") returned 8 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff70, cbMultiByte=-1, lpWideCharStr=0x11853e8, cchWideChar=13 | out: lpWideCharStr="$windows.~ws") returned 13 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d688, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d688, cbMultiByte=-1, lpWideCharStr=0x1185410, cchWideChar=17 | out: lpWideCharStr="application data") returned 17 [0081.003] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fff88, cbMultiByte=-1, lpWideCharStr=0x1185440, cchWideChar=13 | out: lpWideCharStr="$windows.~bt") returned 13 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffa0, cbMultiByte=-1, lpWideCharStr=0x1185358, cchWideChar=7 | out: lpWideCharStr="google") returned 7 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffb0, cbMultiByte=-1, lpWideCharStr=0x1185468, cchWideChar=13 | out: lpWideCharStr="$recycle.bin") returned 13 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x11fffc8, cbMultiByte=-1, lpWideCharStr=0x117d0e8, cchWideChar=12 | out: lpWideCharStr="windows.old") returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d7e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d7e0, cbMultiByte=-1, lpWideCharStr=0x117d228, cchWideChar=12 | out: lpWideCharStr="programdata") returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d7f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 26 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d7f8, cbMultiByte=-1, lpWideCharStr=0x11854b8, cchWideChar=26 | out: lpWideCharStr="system volume information") returned 26 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d6a8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 20 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d6a8, cbMultiByte=-1, lpWideCharStr=0x11854f8, cchWideChar=20 | out: lpWideCharStr="program files (x86)") returned 20 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d820, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d820, cbMultiByte=-1, lpWideCharStr=0x11853a0, cchWideChar=5 | out: lpWideCharStr="boot") returned 5 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d830, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d830, cbMultiByte=-1, lpWideCharStr=0x117d368, cchWideChar=12 | out: lpWideCharStr="tor browser") returned 12 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d848, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d848, cbMultiByte=-1, lpWideCharStr=0x1185340, cchWideChar=8 | out: lpWideCharStr="windows") returned 8 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d858, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d858, cbMultiByte=-1, lpWideCharStr=0x1185130, cchWideChar=6 | out: lpWideCharStr="intel") returned 6 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.004] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d868, cbMultiByte=-1, lpWideCharStr=0x117d108, cchWideChar=9 | out: lpWideCharStr="perflogs") returned 9 [0081.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d880, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.008] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d880, cbMultiByte=-1, lpWideCharStr=0x117d3a8, cchWideChar=9 | out: lpWideCharStr="msocache") returned 9 [0081.008] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2cb0000 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8d0, cbMultiByte=-1, lpWideCharStr=0x1185058, cchWideChar=6 | out: lpWideCharStr="ntldr") returned 6 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8e0, cbMultiByte=-1, lpWideCharStr=0x117d008, cchWideChar=10 | out: lpWideCharStr="thumbs.db") returned 10 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d8f8, cbMultiByte=-1, lpWideCharStr=0x1185528, cchWideChar=13 | out: lpWideCharStr="bootsect.bak") returned 13 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d910, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d910, cbMultiByte=-1, lpWideCharStr=0x117d2c8, cchWideChar=12 | out: lpWideCharStr="autorun.inf") returned 12 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d928, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d928, cbMultiByte=-1, lpWideCharStr=0x1185550, cchWideChar=15 | out: lpWideCharStr="ntuser.dat.log") returned 15 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d940, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.016] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d940, cbMultiByte=-1, lpWideCharStr=0x117d048, cchWideChar=9 | out: lpWideCharStr="boot.ini") returned 9 [0081.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d958, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d958, cbMultiByte=-1, lpWideCharStr=0x1185578, cchWideChar=13 | out: lpWideCharStr="iconcache.db") returned 13 [0081.017] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d970, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d970, cbMultiByte=-1, lpWideCharStr=0x11855a0, cchWideChar=13 | out: lpWideCharStr="bootfont.bin") returned 13 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d988, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d988, cbMultiByte=-1, lpWideCharStr=0x117d388, cchWideChar=11 | out: lpWideCharStr="ntuser.dat") returned 11 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9c8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9c8, cbMultiByte=-1, lpWideCharStr=0x117d2e8, cchWideChar=11 | out: lpWideCharStr="ntuser.ini") returned 11 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dae8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.018] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dae8, cbMultiByte=-1, lpWideCharStr=0x117d0a8, cchWideChar=12 | out: lpWideCharStr="desktop.ini") returned 12 [0081.018] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x30d0000 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc78, cbMultiByte=-1, lpWideCharStr=0x117df40, cchWideChar=4 | out: lpWideCharStr="ps1") returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc88, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc88, cbMultiByte=-1, lpWideCharStr=0x117e080, cchWideChar=4 | out: lpWideCharStr="ldf") returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc98, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dc98, cbMultiByte=-1, lpWideCharStr=0x1185178, cchWideChar=5 | out: lpWideCharStr="lock") returned 5 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dca8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dca8, cbMultiByte=-1, lpWideCharStr=0x1185160, cchWideChar=6 | out: lpWideCharStr="theme") returned 6 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcb8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcb8, cbMultiByte=-1, lpWideCharStr=0x117dfd0, cchWideChar=4 | out: lpWideCharStr="msi") returned 4 [0081.026] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcc8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcc8, cbMultiByte=-1, lpWideCharStr=0x117e000, cchWideChar=4 | out: lpWideCharStr="sys") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcd8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcd8, cbMultiByte=-1, lpWideCharStr=0x117e020, cchWideChar=4 | out: lpWideCharStr="wpx") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dce8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dce8, cbMultiByte=-1, lpWideCharStr=0x117e030, cchWideChar=4 | out: lpWideCharStr="cpl") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcf8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dcf8, cbMultiByte=-1, lpWideCharStr=0x117e0d0, cchWideChar=4 | out: lpWideCharStr="adv") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117def0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117def0, cbMultiByte=-1, lpWideCharStr=0x117e0f0, cchWideChar=4 | out: lpWideCharStr="msc") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de10, cbMultiByte=-1, lpWideCharStr=0x11857e8, cchWideChar=4 | out: lpWideCharStr="scr") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de40, cbMultiByte=-1, lpWideCharStr=0x11857b8, cchWideChar=4 | out: lpWideCharStr="bat") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df00, cbMultiByte=-1, lpWideCharStr=0x11857c8, cchWideChar=4 | out: lpWideCharStr="key") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd90, cbMultiByte=-1, lpWideCharStr=0x11856f8, cchWideChar=4 | out: lpWideCharStr="ico") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd30, cbMultiByte=-1, lpWideCharStr=0x11856c8, cchWideChar=4 | out: lpWideCharStr="dll") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de60, cbMultiByte=-1, lpWideCharStr=0x1185628, cchWideChar=4 | out: lpWideCharStr="hta") returned 4 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 14 [0081.027] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db00, cbMultiByte=-1, lpWideCharStr=0x11859d0, cchWideChar=14 | out: lpWideCharStr="deskthemepack") returned 14 [0081.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de20, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de20, cbMultiByte=-1, lpWideCharStr=0x1185190, cchWideChar=8 | out: lpWideCharStr="nomedia") returned 8 [0081.029] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddf0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddf0, cbMultiByte=-1, lpWideCharStr=0x1185648, cchWideChar=4 | out: lpWideCharStr="msu") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dda0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dda0, cbMultiByte=-1, lpWideCharStr=0x11856d8, cchWideChar=4 | out: lpWideCharStr="rtp") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd80, cbMultiByte=-1, lpWideCharStr=0x1185668, cchWideChar=4 | out: lpWideCharStr="msp") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de30, cbMultiByte=-1, lpWideCharStr=0x1185608, cchWideChar=4 | out: lpWideCharStr="idx") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de50, cbMultiByte=-1, lpWideCharStr=0x1185618, cchWideChar=4 | out: lpWideCharStr="ani") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de70, cbMultiByte=-1, lpWideCharStr=0x11856a8, cchWideChar=4 | out: lpWideCharStr="386") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de80, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de80, cbMultiByte=-1, lpWideCharStr=0x1185298, cchWideChar=8 | out: lpWideCharStr="diagcfg") returned 8 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117deb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117deb0, cbMultiByte=-1, lpWideCharStr=0x11856e8, cchWideChar=4 | out: lpWideCharStr="bin") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddb0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddb0, cbMultiByte=-1, lpWideCharStr=0x1185768, cchWideChar=4 | out: lpWideCharStr="mod") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd70, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd70, cbMultiByte=-1, lpWideCharStr=0x1185788, cchWideChar=4 | out: lpWideCharStr="ics") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd40, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd40, cbMultiByte=-1, lpWideCharStr=0x1185858, cchWideChar=4 | out: lpWideCharStr="com") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dec0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dec0, cbMultiByte=-1, lpWideCharStr=0x1185818, cchWideChar=4 | out: lpWideCharStr="hlp") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd50, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd50, cbMultiByte=-1, lpWideCharStr=0x1185838, cchWideChar=4 | out: lpWideCharStr="spl") returned 4 [0081.030] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddc0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddc0, cbMultiByte=-1, lpWideCharStr=0x1185948, cchWideChar=4 | out: lpWideCharStr="nls") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de00, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de00, cbMultiByte=-1, lpWideCharStr=0x1185828, cchWideChar=4 | out: lpWideCharStr="cab") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117de90, cbMultiByte=-1, lpWideCharStr=0x1185958, cchWideChar=4 | out: lpWideCharStr="exe") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dd60, cbMultiByte=-1, lpWideCharStr=0x1185088, cchWideChar=8 | out: lpWideCharStr="diagpkg") returned 8 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dea0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dea0, cbMultiByte=-1, lpWideCharStr=0x11858d8, cchWideChar=4 | out: lpWideCharStr="icl") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ded0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ded0, cbMultiByte=-1, lpWideCharStr=0x1185878, cchWideChar=4 | out: lpWideCharStr="ocx") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dee0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dee0, cbMultiByte=-1, lpWideCharStr=0x11858c8, cchWideChar=4 | out: lpWideCharStr="rom") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddd0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117ddd0, cbMultiByte=-1, lpWideCharStr=0x1185928, cchWideChar=4 | out: lpWideCharStr="prf") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117da58, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117da58, cbMultiByte=-1, lpWideCharStr=0x117d128, cchWideChar=10 | out: lpWideCharStr="themepack") returned 10 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db30, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db30, cbMultiByte=-1, lpWideCharStr=0x117d028, cchWideChar=9 | out: lpWideCharStr="msstyles") returned 9 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dde0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dde0, cbMultiByte=-1, lpWideCharStr=0x11858e8, cchWideChar=4 | out: lpWideCharStr="lnk") returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e250, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e250, cbMultiByte=-1, lpWideCharStr=0x1185010, cchWideChar=5 | out: lpWideCharStr="icns") returned 5 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e180, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.031] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e180, cbMultiByte=-1, lpWideCharStr=0x11859b8, cchWideChar=4 | out: lpWideCharStr="mpa") returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e160, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e160, cbMultiByte=-1, lpWideCharStr=0x1185908, cchWideChar=4 | out: lpWideCharStr="drv") returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2c0, cbMultiByte=-1, lpWideCharStr=0x11859a8, cchWideChar=4 | out: lpWideCharStr="cur") returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e190, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e190, cbMultiByte=-1, lpWideCharStr=0x1185250, cchWideChar=8 | out: lpWideCharStr="diagcab") returned 8 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2d0, cbMultiByte=-1, lpWideCharStr=0x1185b28, cchWideChar=4 | out: lpWideCharStr="cmd") returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e260, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e260, cbMultiByte=-1, lpWideCharStr=0x1185bb8, cchWideChar=4 | out: lpWideCharStr="shs") returned 4 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1a0, cbMultiByte=-1, lpWideCharStr=0x11851f0, cchWideChar=7 | out: lpWideCharStr="encsvc") returned 7 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dad0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dad0, cbMultiByte=-1, lpWideCharStr=0x117d088, cchWideChar=9 | out: lpWideCharStr="powerpnt") returned 9 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e230, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e230, cbMultiByte=-1, lpWideCharStr=0x11852e0, cchWideChar=6 | out: lpWideCharStr="ocssd") returned 6 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e270, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e270, cbMultiByte=-1, lpWideCharStr=0x1185238, cchWideChar=6 | out: lpWideCharStr="steam") returned 6 [0081.032] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9e0, cbMultiByte=-1, lpWideCharStr=0x117d0c8, cchWideChar=12 | out: lpWideCharStr="isqlplussvc") returned 12 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e240, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e240, cbMultiByte=-1, lpWideCharStr=0x1185268, cchWideChar=8 | out: lpWideCharStr="outlook") returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e220, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e220, cbMultiByte=-1, lpWideCharStr=0x1185bc8, cchWideChar=4 | out: lpWideCharStr="sql") returned 4 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e210, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e210, cbMultiByte=-1, lpWideCharStr=0x11852f8, cchWideChar=6 | out: lpWideCharStr="ocomm") returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e290, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e290, cbMultiByte=-1, lpWideCharStr=0x1185028, cchWideChar=8 | out: lpWideCharStr="agntsvc") returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2f0, cbMultiByte=-1, lpWideCharStr=0x11850a0, cchWideChar=6 | out: lpWideCharStr="mspub") returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e300, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e300, cbMultiByte=-1, lpWideCharStr=0x11850b8, cchWideChar=8 | out: lpWideCharStr="onenote") returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e280, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e280, cbMultiByte=-1, lpWideCharStr=0x11860e8, cchWideChar=8 | out: lpWideCharStr="winword") returned 8 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e140, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e140, cbMultiByte=-1, lpWideCharStr=0x1185ed8, cchWideChar=7 | out: lpWideCharStr="thebat") returned 7 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1c0, cbMultiByte=-1, lpWideCharStr=0x1185fb0, cchWideChar=6 | out: lpWideCharStr="excel") returned 6 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117da10, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 13 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117da10, cbMultiByte=-1, lpWideCharStr=0x1186208, cchWideChar=13 | out: lpWideCharStr="mydesktopqos") returned 13 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9f8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0081.038] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d9f8, cbMultiByte=-1, lpWideCharStr=0x117d148, cchWideChar=11 | out: lpWideCharStr="ocautoupds") returned 11 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db60, cbMultiByte=-1, lpWideCharStr=0x117d1e8, cchWideChar=12 | out: lpWideCharStr="thunderbird") returned 12 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db18, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db18, cbMultiByte=-1, lpWideCharStr=0x117d308, cchWideChar=9 | out: lpWideCharStr="synctime") returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db48, cbMultiByte=-1, lpWideCharStr=0x117d168, cchWideChar=9 | out: lpWideCharStr="infopath") returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d188, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d188, cbMultiByte=-1, lpWideCharStr=0x1186230, cchWideChar=17 | out: lpWideCharStr="mydesktopservice") returned 17 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1d0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1d0, cbMultiByte=-1, lpWideCharStr=0x1185ef0, cchWideChar=8 | out: lpWideCharStr="firefox") returned 8 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2a0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2a0, cbMultiByte=-1, lpWideCharStr=0x1186100, cchWideChar=7 | out: lpWideCharStr="oracle") returned 7 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117daa0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 15 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117daa0, cbMultiByte=-1, lpWideCharStr=0x1186260, cchWideChar=15 | out: lpWideCharStr="sqbcoreservice") returned 15 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2b0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e2b0, cbMultiByte=-1, lpWideCharStr=0x1185fe0, cchWideChar=8 | out: lpWideCharStr="dbeng50") returned 8 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db78, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 12 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db78, cbMultiByte=-1, lpWideCharStr=0x117d1a8, cchWideChar=12 | out: lpWideCharStr="tbirdconfig") returned 12 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117db90, cbMultiByte=-1, lpWideCharStr=0x117d1c8, cchWideChar=9 | out: lpWideCharStr="msaccess") returned 9 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e150, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e150, cbMultiByte=-1, lpWideCharStr=0x1185f80, cchWideChar=6 | out: lpWideCharStr="visio") returned 6 [0081.039] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e170, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e170, cbMultiByte=-1, lpWideCharStr=0x11860b8, cchWideChar=7 | out: lpWideCharStr="dbsnmp") returned 7 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e200, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e200, cbMultiByte=-1, lpWideCharStr=0x1185e60, cchWideChar=8 | out: lpWideCharStr="wordpad") returned 8 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dab8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 10 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dab8, cbMultiByte=-1, lpWideCharStr=0x117d208, cchWideChar=10 | out: lpWideCharStr="xfssvccon") returned 10 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e398, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 21661 [0081.040] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e398, cbMultiByte=-1, lpWideCharStr=0x1186288, cchWideChar=21661 | out: lpWideCharStr="boisehosting.net;fotoideaymedia.es;dubnew.com;stallbyggen.se;koken-voor-baby.nl;juneauopioidworkgroup.org;vancouver-print.ca;zewatchers.com;bouquet-de-roses.com;seevilla-dr-sturm.at;olejack.ru;i-trust.dk;wasmachtmeinfonds.at;appsformacpc.com;friendsandbrgrs.com;thenewrejuveme.com;xn--singlebrsen-vergleich-nec.com;sabel-bf.com;seminoc.com;ceres.org.au;cursoporcelanatoliquido.online;marietteaernoudts.nl;tastewilliamsburg.com;charlottepoudroux-photographie.fr;aselbermachen.com;klimt2012.info;accountancywijchen.nl;creamery201.com;rerekatu.com;makeurvoiceheard.com;vannesteconstruct.be;wellplast.se;andersongilmour.co.uk;bradynursery.com;aarvorg.com;facettenreich27.de;balticdermatology.lt;artige.com;highlinesouthasc.com;crowd-patch.co.uk;sofavietxinh.com;jorgobe.at;danskretursystem.dk;higadograsoweb.com;supportsumba.nl;ruralarcoiris.com;projetlyonturin.fr;kidbucketlist.com.au;harpershologram.wordpress.com;ohidesign.com;international-sound-awards.com;krlosdavid.com;durganews.com;leather-factory.co.jp;coding-machine.com;i-arslan.de;caribbeansunpoker.com;mir-na-iznanku.com;ki-lowroermond.nl;promesapuertorico.com;kissit.ca;dezatec.es;cite4me.org;grelot-home.com;musictreehouse.net;hkr-reise.de;id-vet.com;gasolspecialisten.se;vyhino-zhulebino-24.ru;karacaoglu.nl;bayoga.co.uk;solhaug.tk;jadwalbolanet.info;ncid.bc.ca;bricotienda.com;boldcitydowntown.com;homecomingstudio.com;sojamindbody.com;castillobalduz.es;asgestion.com;dushka.ua;hiddencitysecrets.com.au;danubecloud.com;roadwarrior.app;newstap.com.ng;no-plans.com;schoolofpassivewealth.com;senson.fi;denifl-consulting.at;lmtprovisions.com;talentwunder.com;acomprarseguidores.com;myzk.site;theapifactory.com;midmohandyman.com;argos.wityu.fund;dinslips.se;kalkulator-oszczednosci.pl;wurmpower.at;drugdevice.org;foretprivee.ca;nurturingwisdom.com;funjose.org.gt;blgr.be;readberserk.com;lescomtesdemean.be;firstpaymentservices.com;malychanieruchomoscipremium.com;travelffeine.com;latribuessentielle.com;lusak.at;better.town;smessier.com;kafu.ch;ikads.org;id-et-d.fr;sanaia.com;prochain-voyage.net;edrcreditservices.nl;yassir.pro;gantungankunciakrilikbandung.com;moveonnews.com;bhwlawfirm.com;bigbaguettes.eu;edv-live.de;littlebird.salon;iyengaryogacharlotte.com;toponlinecasinosuk.co.uk;zonamovie21.net;caribdoctor.org;body-guards.it;calabasasdigest.com;elimchan.com;herbstfeststaefa.ch;thewellnessmimi.com;corola.es;pomodori-pizzeria.de;controldekk.com;lichencafe.com;lefumetdesdombes.com;seagatesthreecharters.com;copystar.co.uk;systemate.dk;alsace-first.com;webmaster-peloton.com;koko-nora.dk;jakekozmor.com;mousepad-direkt.de;iwelt.de;dirittosanitario.biz;precisionbevel.com;boulderwelt-muenchen-west.de;chatizel-paysage.fr;praxis-foerderdiagnostik.de;globedivers.wordpress.com;nosuchthingasgovernment.com;neuschelectrical.co.za;schmalhorst.de;mediaclan.info;ihr-news.jp;bunburyfreightservices.com.au;edelman.jp;backstreetpub.com;spsshomeworkhelp.com;lillegrandpalais.com;smithmediastrategies.com;enovos.de;loprus.pl;bsaship.com;importardechina.info;shhealthlaw.com;freie-baugutachterpraxis.de;maxadams.london;deprobatehelp.com;baylegacy.com;deltacleta.cat;financescorecard.com;maureenbreezedancetheater.org;plv.media;winrace.no;leoben.at;pawsuppetlovers.com;tuuliautio.fi;paradicepacks.com;1team.es;testcoreprohealthuk.com;broseller.com;iyahayki.nl;lorenacarnero.com;satyayoga.de;notmissingout.com;chavesdoareeiro.com;mezhdu-delom.ru;hugoversichert.de;jusibe.com;imaginado.de;craftleathermnl.com;sauschneider.info;atalent.fi;conexa4papers.trade;global-kids.info;serce.info.pl;agence-referencement-naturel-geneve.net;zimmerei-fl.de;augenta.com;fannmedias.com;villa-marrakesch.de;ulyssemarketing.com;x-ray.ca;schraven.de;bowengroup.com.au;sairaku.net;southeasternacademyofprosthodontics.org;modamilyon.com;pubweb.carnet.hr;alysonhoward.com;sahalstore.com;triactis.com;panelsandwichmadrid.es;xn--vrftet-pua.biz;adoptioperheet.fi;miriamgrimm.de;filmstreamingvfcomplet.be;kostenlose-webcams.com;deoudedorpskernnoordwijk.nl;live-your-life.jp;mardenherefordshire-pc.gov.uk;instatron.net;mirjamholleman.nl;euro-trend.pl;kojima-shihou.com;nuzech.com;basisschooldezonnewijzer.nl;quemargrasa.net;actecfoundation.org;gamesboard.info;podsosnami.ru;extensionmaison.info;retroearthstudio.com;polzine.net;hmsdanmark.dk;linnankellari.fi;schoellhammer.com;elpa.se;mooreslawngarden.com;rozemondcoaching.nl;lenreactiv-shop.ru;uranus.nl;advokathuset.dk;ora-it.de;love30-chanko.com;smartypractice.com;rebeccarisher.com;cafemattmeera.com;bargningavesta.se;www1.proresult.no;rhinosfootballacademy.com;polychromelabs.com;notsilentmd.org;makeflowers.ru;zimmerei-deboer.de;ccpbroadband.com;iwr.nl;wychowanieprzedszkolne.pl;greenpark.ch;bimnapratica.com;lachofikschiet.nl;memaag.com;parking.netgateway.eu;tanzschule-kieber.de;antiaginghealthbenefits.com;simulatebrain.com;digi-talents.com;hairnetty.wordpress.com;samnewbyjax.com;helikoptervluchtnewyork.nl;devlaur.com;cimanchesterescorts.co.uk;houseofplus.com;rushhourappliances.com;pelorus.group;kedak.de;lapmangfpt.info.vn;pivoineetc.fr;marchand-sloboda.com;anybookreader.de;markelbroch.com;celularity.com;rafaut.com;unim.su;latestmodsapks.com;thedresserie.com;bigasgrup.com;slimidealherbal.com;phantastyk.com;thailandholic.com;tophumanservicescourses.com;aakritpatel.com;navyfederalautooverseas.com;wien-mitte.co.at;forestlakeuca.org.au;sporthamper.com;psnacademy.in;michaelsmeriglioracing.com;jbbjw.com;colorofhorses.com;iqbalscientific.com;cleliaekiko.online;stemplusacademy.com;effortlesspromo.com;microcirc.net;mbfagency.com;theduke.de;drinkseed.com;troegs.com;peterstrobos.com;consultaractadenacimiento.com;huissier-creteil.com;geoffreymeuli.com;skanah.com;despedidascostablanca.es;alten-mebel63.ru;theadventureedge.com;profectis.de;mepavex.nl;rimborsobancario.net;pasvenska.se;tampaallen.com;symphonyenvironmental.com;videomarketing.pro;pickanose.com;licor43.de;aniblinova.wordpress.com;ventti.com.ar;hhcourier.com;buymedical.biz;oncarrot.com;nachhilfe-unterricht.com;mapawood.com;vox-surveys.com;milsing.hr;sotsioloogia.ee;nativeformulas.com;kirkepartner.dk;partnertaxi.sk;visiativ-industry.fr;transliminaltribe.wordpress.com;chefdays.de;cursosgratuitosnainternet.com;faronics.com;d2marketing.co.uk;lapinlviasennus.fi;miraclediet.fun;bristolaeroclub.co.uk;jameskibbie.com;songunceliptv.com;baronloan.org;idemblogs.com;eglectonk.online;christinarebuffetcourses.com;bastutunnan.se;blogdecachorros.com;finde-deine-marke.de;platformier.com;antenanavi.com;vanswigchemdesign.com;gporf.fr;pmc-services.de;atmos-show.com;danholzmann.com;itelagen.com;transportesycementoshidalgo.es;gymnasedumanagement.com;siluet-decor.ru;gasbarre.com;milltimber.aberdeen.sch.uk;tinkoff-mobayl.ru;expandet.dk;rumahminangberdaya.com;polymedia.dk;newyou.at;zenderthelender.com;artallnightdc.com;tomaso.gr;centrospgolega.com;sweering.fr;tux-espacios.com;ecopro-kanto.com;spacecitysisters.org;bierensgebakkramen.nl;all-turtles.com;coffreo.biz;tandartspraktijkheesch.nl;vietlawconsultancy.com;deko4you.at;tennisclubetten.nl;extraordinaryoutdoors.com;crowcanyon.com;classycurtainsltd.co.uk;apolomarcas.com;verytycs.com;manijaipur.com;veybachcenter.de;falcou.fr;associationanalytics.com;beautychance.se;pocket-opera.de;christ-michael.net;vdberg-autoimport.nl;4net.guru;finediningweek.pl;stampagrafica.es;naturalrapids.com;ussmontanacommittee.us;beaconhealthsystem.org;upplandsspar.se;tradiematepro.com.au;oneplusresource.org;maasreusel.nl;aodaichandung.com;campus2day.de;burkert-ideenreich.de;you-bysia.com.au;mediaacademy-iraq.org;xtptrack.com;eaglemeetstiger.de;mountaintoptinyhomes.com;stemenstilte.nl;noskierrenteria.com;ivfminiua.com;biapi-coaching.fr;art2gointerieurprojecten.nl;corendonhotels.com;ditog.fr;kadesignandbuild.co.uk;abogadosaccidentetraficosevilla.es;camsadviser.com;limassoldriving.com;worldhealthbasicinfo.com;kojinsaisei.info;schmalhorst.de;bigler-hrconsulting.ch;girlillamarketing.com;xn--rumung-bua.online;naturstein-hotte.de;agence-chocolat-noir.com;stormwall.se;collaborativeclassroom.org;baptisttabernacle.com;streamerzradio1.site;mooglee.com;smart-light.co.uk;fitovitaforum.com;c2e-poitiers.com;igrealestate.com;wari.com.pe;takeflat.com;logopaedie-blomberg.de;mrsplans.net;mooshine.com;humanityplus.org;otsu-bon.com;onlyresultsmarketing.com;interactcenter.org;ungsvenskarna.se;35-40konkatsu.net;zzyjtsgls.com;spectrmash.ru;tenacitytenfold.com;torgbodenbollnas.se;drnice.de;lightair.com;huesges-gruppe.de;promalaga.es;paulisdogshop.de;hotelsolbh.com.br;julis-lsa.de;myteamgenius.com;darnallwellbeing.org.uk;refluxreducer.com;educar.org;kuntokeskusrok.fi;truenyc.co;comparatif-lave-linge.fr;frontierweldingllc.com;autodemontagenijmegen.nl;spylista.com;allfortheloveofyou.com;ilso.net;corona-handles.com;micahkoleoso.de;fairfriends18.de;haremnick.com;ecoledansemulhouse.fr;blewback.com;macabaneaupaysflechois.com;osterberg.fi;surespark.org.uk;stupbratt.no;hokagestore.com;mirkoreisser.de;tomoiyuma.com;tigsltd.com;manifestinglab.com;glennroberts.co.nz;hardinggroup.com;zso-mannheim.de;yousay.site;dublikator.com;oneheartwarriors.at;pointos.com;kenhnoithatgo.com;ausbeverage.com.au;testzandbakmetmening.online;grupocarvalhoerodrigues.com.br;werkkring.nl;hotelzentral.at;vibethink.net;123vrachi.ru;allure-cosmetics.at;mrxermon.de;bloggyboulga.net;bouldercafe-wuppertal.de;sobreholanda.com;smogathon.com;beyondmarcomdotcom.wordpress.com;wraithco.com;bookspeopleplaces.com;montrium.com;webcodingstudio.com;lucidinvestbank.com;ncs-graphic-studio.com;stingraybeach.com;aglend.com.au;lecantou-coworking.com;tongdaifpthaiphong.net;solerluethi-allart.ch;coursio.com;otto-bollmann.de;madinblack.com;vibehouse.rw;bridgeloanslenders.com;erstatningsadvokaterne.dk;resortmtn.com;socstrp.org;pier40forall.org;ostheimer.at;quickyfunds.com;aminaboutique247.com;jobcenterkenya.com;jenniferandersonwriter.com;marcuswhitten.site;mediaplayertest.net;irinaverwer.com;stoeberstuuv.de;lebellevue.fr;the-virtualizer.com;outcomeisincome.com;gonzalezfornes.es;kunze-immobilien.de;myhealth.net.au;helenekowalsky.com;xn--fn-kka.no;withahmed.com;simplyblessedbykeepingitreal.com;havecamerawilltravel2017.wordpress.com;muamuadolls.com;balticdentists.com;mank.de;croftprecision.co.uk;jandaonline.com;datacenters-in-europe.com;gw2guilds.org;raschlosser.de;geekwork.pl;pv-design.de;opatrovanie-ako.sk;ausair.com.au;commonground-stories.com;parebrise-tla.fr;vloeren-nu.nl;conasmanagement.de;dlc.berlin;liveottelut.com;4youbeautysalon.com;lykkeliv.net;adultgamezone.com;hexcreatives.co;citymax-cr.com;portoesdofarrobo.com;patrickfoundation.net;tonelektro.nl;atozdistribution.co.uk;urclan.net;evergreen-fishing.com;body-armour.online;nsec.se;autopfand24.de;syndikat-asphaltfieber.de;yourobgyn.net;vihannesporssi.fi;new.devon.gov.uk;teczowadolina.bytom.pl;antonmack.de;dpo-as-a-service.com;pogypneu.sk;creative-waves.co.uk;htchorst.nl;xn--fnsterputssollentuna-39b.se;norpol-yachting.com;parkstreetauto.net;sloverse.com;candyhouseusa.com;tsklogistik.eu;smejump.co.th;diversiapsicologia.es;unetica.fr;drfoyle.com;cranleighscoutgroup.org;dekkinngay.com;n1-headache.com;amerikansktgodis.se;evangelische-pfarrgemeinde-tuniberg.de;fransespiegels.nl;coastalbridgeadvisors.com;qualitaetstag.de;kath-kirche-gera.de;alhashem.net;schutting-info.nl;2ekeus.nl;berlin-bamboo-bikes.org;minipara.com;blood-sports.net;milestoneshows.com;physiofischer.de;ontrailsandboulevards.com;babcockchurch.org;healthyyworkout.com;plantag.de;krcove-zily.eu;mylolis.com;fax-payday-loans.com;praxis-management-plus.de;smokeysstoves.com;longislandelderlaw.com;calxplus.eu;mountsoul.de;dubscollective.com;luckypatcher-apkz.com;epwritescom.wordpress.com;fundaciongregal.org;klusbeter.nl;jobmap.at;oldschoolfun.net;abl1.net;labobit.it;romeguidedvisit.com;carrybrands.nl;people-biz.com;blossombeyond50.com;theclubms.com;whittier5k.com;jolly-events.com;kisplanning.com.au;rostoncastings.co.uk;ravensnesthomegoods.com;nhadatcanho247.com;vetapharma.fr;hihaho.com;tulsawaterheaterinstallation.com;purposeadvisorsolutions.com;faizanullah.com;directwindowco.com;herbayupro.com;pay4essays.net;work2live.de;stoneys.ch;webhostingsrbija.rs;lange.host;baustb.de;psa-sec.de;hushavefritid.dk;lloydconstruction.com;ra-staudte.de;mbxvii.com;tecnojobsnet.com;starsarecircular.org;twohourswithlena.wordpress.com;stoeferlehalle.de;merzi.info;garage-lecompte-rouen.fr;hypozentrum.com;nestor-swiss.ch;thomasvicino.com;kmbshipping.co.uk;denovofoodsgroup.com;planchaavapor.net;dr-pipi.de;qlog.de;lynsayshepherd.co.uk;aco-media.nl;abogadoengijon.es;bestbet.com;liliesandbeauties.org;norovirus-ratgeber.de;thee.network;stacyloeb.com;bundabergeyeclinic.com.au;sandd.nl;americafirstcommittee.org;milanonotai.it;kevinjodea.com;easytrans.com.au;westdeptfordbuyrite.com;carriagehousesalonvt.com;operaslovakia.sk;corelifenutrition.com;hashkasolutindo.com;compliancesolutionsstrategies.com;edgewoodestates.org;mastertechengineering.com;pinkexcel.com;cnoia.org;aprepol.com;rieed.de;katketytaanet.fi;lascuola.nl;assurancesalextrespaille.fr;paymybill.guru;xoabigail.com;ligiercenter-sachsen.de;answerstest.ru;airconditioning-waalwijk.nl;pixelarttees.com;freie-gewerkschaften.de;dnepr-beskid.com.ua;eco-southafrica.com;dutchcoder.nl;iphoneszervizbudapest.hu;allentownpapershow.com;bingonearme.org;summitmarketingstrategies.com;completeweddingkansas.com;wolf-glas-und-kunst.de;employeesurveys.com;scenepublique.net;monark.com;seitzdruck.com;alvinschwartz.wordpress.com;knowledgemuseumbd.com;spd-ehningen.de;boosthybrid.com.au;launchhubl.com;revezlimage.com;dontpassthepepper.com;petnest.ir;associacioesportivapolitg.cat;12starhd.online;jerling.de;kaotikkustomz.com;sarbatkhalsafoundation.org;solinegraphic.com;skiltogprint.no;craigmccabe.fun;puertamatic.es;mylovelybluesky.com;run4study.com;pierrehale.com;cactusthebrand.com;101gowrie.com;nicoleaeschbachorg.wordpress.com;architekturbuero-wagner.net;mindpackstudios.com;vitavia.lt;bouncingbonanza.com;lukeshepley.wordpress.com;igfap.com;bockamp.com;levihotelspa.fi;exenberger.at;tinyagency.com;familypark40.com;alfa-stroy72.com;boompinoy.com;mdacares.com;architecturalfiberglass.org;slupetzky.at;sinal.org;qualitus.com;deepsouthclothingcompany.com;groupe-frayssinet.fr;synlab.lt;kamienny-dywan24.pl;ilcdover.com;humancondition.com;insigniapmg.com;arteservicefabbro.com;team-montage.dk;iviaggisonciliegie.it;austinlchurch.com;rehabilitationcentersinhouston.net;zervicethai.co.th;vickiegrayimages.com;ziegler-praezisionsteile.de;crediacces.com;comarenterprises.com;courteney-cox.net;trapiantofue.it;space.ua;odiclinic.org;noesis.tech;urmasiimariiuniri.ro;8449nohate.org;xltyu.com;kikedeoliveira.com;remcakram.com;degroenetunnel.com;strandcampingdoonbeg.com;haar-spange.com;pmcimpact.com;ceid.info.tr;gemeentehetkompas.nl;stopilhan.com;dareckleyministries.com;sportverein-tambach.de;ivivo.es;braffinjurylawfirm.com;pcprofessor.com;bordercollie-nim.nl;hrabritelefon.hr;ctrler.cn;makeitcount.at;foryourhealth.live;seproc.hn;ianaswanson.com;nijaplay.com;brandl-blumen.de;lubetkinmediacompanies.com;ouryoungminds.wordpress.com;micro-automation.de;apprendrelaudit.com;securityfmm.com;geisterradler.de;morawe-krueger.de;nmiec.com;sla-paris.com;figura.team;vitalyscenter.es;jvanvlietdichter.nl;crosspointefellowship.church;handi-jack-llc.com;femxarxa.cat;wsoil.com.sg;xlarge.at;groupe-cets.com;admos-gleitlager.de;liikelataamo.fi;sevenadvertising.com;nancy-informatique.fr;ateliergamila.com;stefanpasch.me;wacochamber.com;aurum-juweliere.de;hatech.io;centuryrs.com;ilive.lt;fensterbau-ziegler.de;zflas.com;thefixhut.com;goodgirlrecovery.com;botanicinnovations.com;saxtec.com;tips.technology;smalltownideamill.wordpress.com;pt-arnold.de;tarotdeseidel.com;bildungsunderlebnis.haus;brevitempore.net;imadarchid.com;sportiomsportfondsen.nl;digivod.de;darrenkeslerministries.com;smhydro.com.pl;echtveilig.nl;schlafsack-test.net;galserwis.pl;eraorastudio.com;faroairporttransfers.net;connectedace.com;pcp-nc.com;jyzdesign.com;suncrestcabinets.ca;offroadbeasts.com;teresianmedia.org;greenfieldoptimaldentalcare.com;thomas-hospital.de;embracinghiscall.com;ralister.co.uk;rosavalamedahr.com;quizzingbee.com;richard-felix.co.uk;sipstroysochi.ru;todocaracoles.com;shiftinspiration.com;campusoutreach.org;bodyforwife.com;katiekerr.co.uk;sportsmassoren.com;trystana.com;ino-professional.ru;slashdb.com;selfoutlet.com;personalenhancementcenter.com;proudground.org;walkingdeadnj.com;d1franchise.com;anthonystreetrimming.com;forskolorna.org;brawnmediany.com;uimaan.fi;journeybacktolife.com;pferdebiester.de;kao.at;asteriag.com;hvccfloorcare.com;parks-nuernberg.de;div-vertriebsforschung.de;centromarysalud.com;asiluxury.com;chrissieperry.com;verbisonline.com;onlybacklink.com;radaradvies.nl;daklesa.de;sagadc.com;waveneyrivercentre.co.uk;mytechnoway.com;fitnessbazaar.com;fibrofolliculoma.info;fayrecreations.com;maryloutaylor.com;whyinterestingly.ru;maratonaclubedeportugal.com;maineemploymentlawyerblog.com;kosterra.com;blumenhof-wegleitner.at;punchbaby.com;wmiadmin.com;bxdf.info;harveybp.com;vermoote.de;johnsonfamilyfarmblog.wordpress.com;plastidip.com.ar;autofolierung-lu.de;highimpactoutdoors.net;cwsitservices.co.uk;hairstylesnow.site;mymoneyforex.com;victoriousfestival.co.uk;farhaani.com;web.ion.ag;simoneblum.de;carolinepenn.com;blacksirius.de;trackyourconstruction.com;naturavetal.hr;heliomotion.com;rollingrockcolumbia.com;judithjansen.com;poultrypartners.nl;mirjamholleman.nl;baumkuchenexpo.jp;insidegarage.pl;irishmachineryauctions.com;intecwi.com;porno-gringo.com;penco.ie;jacquin-maquettes.com;anteniti.com;hebkft.hu;ftlc.es;dutchbrewingcoffee.com;behavioralmedicinespecialists.com;socialonemedia.com;cirugiauretra.es;c-a.co.in;nokesvilledentistry.com;chandlerpd.com;aunexis.ch;gmto.fr;berliner-versicherungsvergleich.de;jsfg.com;vesinhnha.com.vn;joyeriaorindia.com;greenko.pl;cerebralforce.net;rota-installations.co.uk;presseclub-magdeburg.de;yamalevents.com;renergysolution.com;roygolden.com;verifort-capital.de;delawarecorporatelaw.com;jiloc.com;icpcnj.org;1kbk.com.ua;noixdecocom.fr;entopic.com;hellohope.com;flexicloud.hk;danielblum.info;thaysa.com;mdk-mediadesign.de;nataschawessels.com;smale-opticiens.nl;charlesreger.com;kaliber.co.jp;almosthomedogrescue.dog;reddysbakery.com;waynela.com;ahouseforlease.com;binder-buerotechnik.at;happyeasterimages.org;dr-tremel-rednitzhembach.de;mikeramirezcpa.com;zweerscreatives.nl;dramagickcom.wordpress.com;commercialboatbuilding.com;argenblogs.com.ar;heurigen-bauer.at;ogdenvision.com;gadgetedges.com;izzi360.com;turkcaparbariatrics.com;spargel-kochen.de;pridoxmaterieel.nl;heidelbergartstudio.gallery;ftf.or.at;kaminscy.com;filmvideoweb.com;meusharklinithome.wordpress.com;xn--thucmctc-13a1357egba.com;tstaffing.nl;abogadosadomicilio.es;igorbarbosa.com;homesdollar.com;ncuccr.org;caffeinternet.it;abogados-en-alicante.es;evologic-technologies.com;oslomf.no;desert-trails.com;gastsicht.de;nvwoodwerks.com;slwgs.org;vorotauu.ru;lionware.de;bodyfulls.com;myhostcloud.com;amylendscrestview.com;bptdmaluku.com;bogdanpeptine.ro;perbudget.com;strategicstatements.com;simpliza.com;innote.fi;365questions.org;sanyue119.com;walter-lemm.de;cuppacap.com;teknoz.net;layrshift.eu;blog.solutionsarchitect.guru;parkcf.nl;themadbotter.com;upmrkt.co;modelmaking.nl;nandistribution.nl;ledmes.ru;coding-marking.com;sachnendoc.com;thedad.com;mercantedifiori.com;artotelamsterdam.com;plotlinecreative.com;bauertree.com;woodleyacademy.org;dw-css.de;leda-ukraine.com.ua;destinationclients.fr;jasonbaileystudio.com;cheminpsy.fr;devstyle.org;kindersitze-vergleich.de;live-con-arte.de;bee4win.com;fiscalsort.com;jeanlouissibomana.com;huehnerauge-entfernen.de;eadsmurraypugh.com;fotoscondron.com;DupontSellsHomes.com;brigitte-erler.com;imperfectstore.com;shonacox.com;nacktfalter.de;devok.info;esope-formation.fr;mariposapropaneaz.com;sw1m.ru;mrtour.site;hannah-fink.de;bafuncs.org;kampotpepper.gives;ampisolabergeggi.it;cuspdental.com;philippedebroca.com;abitur-undwieweiter.de;hoteledenpadova.it;tanciu.com;delchacay.com.ar;cortec-neuro.com;theshungiteexperience.com.au;deschl.net;biortaggivaldelsa.com;fitnessingbyjessica.com;dsl-ip.de;officehymy.com;shadebarandgrillorlando.com;bargningharnosand.se;mmgdouai.fr;daniel-akermann-architektur-und-planung.ch;xn--logopdie-leverkusen-kwb.de;buroludo.nl;ymca-cw.org.uk;executiveairllc.com;allamatberedare.se;servicegsm.net;kingfamily.construction;nakupunafoundation.org;henricekupper.com;shsthepapercut.com;lbcframingelectrical.com;ladelirante.fr;clos-galant.com;dr-seleznev.com;siliconbeach-realestate.com;tanzprojekt.com;fatfreezingmachines.com;kamahouse.net;gratispresent.se;softsproductkey.com;marathonerpaolo.com;gopackapp.com;manutouchmassage.com;marketingsulweb.com;craigvalentineacademy.com;catholicmusicfest.com;gaiam.nl;woodworkersolution.com;pasivect.co.uk;cyntox.com;advizewealth.com;y-archive.com;saarland-thermen-resort.com;fizzl.ru;oemands.dk;mrsfieldskc.com;levdittliv.se;rksbusiness.com;sexandfessenjoon.wordpress.com;first-2-aid-u.com;simpkinsedwards.co.uk;the-domain-trader.com;rocketccw.com;celeclub.org;urist-bogatyr.ru;lapinvihreat.fi;ecpmedia.vn;zieglerbrothers.de;piajeppesen.dk;joseconstela.com;carlosja.com;real-estate-experts.com;toreria.es;analiticapublica.es;kariokids.com;leeuwardenstudentcity.nl;psc.de;tetinfo.in;ai-spt.jp;homng.net;em-gmbh.ch;trulynolen.co.uk;oceanastudios.com;csgospeltips.se;luxurytv.jp;abuelos.com;birnam-wood.com;theletter.company;bbsmobler.se;restaurantesszimmer.de;insp.bi;besttechie.com;autodujos.lt;chaotrang.com;galleryartfair.com;321play.com.hk;saka.gr;tandartspraktijkhartjegroningen.nl;steampluscarpetandfloors.com;waermetauscher-berechnen.de;sterlingessay.com;justinvieira.com;waywithwords.net;shiresresidential.com;naswrrg.org;spinheal.ru;slimani.net;modestmanagement.com;triggi.de;cityorchardhtx.com;narcert.com") returned 21661 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1e0, cbMultiByte=-1, lpWideCharStr=0x1185ff8, cchWideChar=6 | out: lpWideCharStr="veeam") returned 6 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1f0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e1f0, cbMultiByte=-1, lpWideCharStr=0x1185ea8, cchWideChar=7 | out: lpWideCharStr="memtas") returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e060, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e060, cbMultiByte=-1, lpWideCharStr=0x1185d78, cchWideChar=4 | out: lpWideCharStr="sql") returned 4 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e0e0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e0e0, cbMultiByte=-1, lpWideCharStr=0x1186118, cchWideChar=7 | out: lpWideCharStr="backup") returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df90, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 4 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df90, cbMultiByte=-1, lpWideCharStr=0x1185d38, cchWideChar=4 | out: lpWideCharStr="vss") returned 4 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df60, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117df60, cbMultiByte=-1, lpWideCharStr=0x1185e30, cchWideChar=7 | out: lpWideCharStr="sophos") returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e0c0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117e0c0, cbMultiByte=-1, lpWideCharStr=0x1185e48, cchWideChar=5 | out: lpWideCharStr="svc$") returned 5 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dff0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117dff0, cbMultiByte=-1, lpWideCharStr=0x1186010, cchWideChar=7 | out: lpWideCharStr="mepocs") returned 7 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1183868, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 5589 [0081.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1183868, cbMultiByte=-1, lpWideCharStr=0x1190bd0, cchWideChar=5589 | out: lpWideCharStr="LQAtAC0APQA9AD0AIABXAGUAbABjAG8AbQBlAC4AIABBAGcAYQBpAG4ALgAgAD0APQA9AC0ALQAtAA0ACgANAAoAWwAtAF0AIABXAGgAYQB0AHMAIABIAGEAcABQAGUAbgA/ACAAWwAtAF0ADQAKAA0ACgBZAG8AdQByACAAZgBpAGwAZQBzACAAYQByAGUAIABlAG4AYwByAHkAcAB0AGUAZAAsACAAYQBuAGQAIABjAHUAcgByAGUAbgB0AGwAeQAgAHUAbgBhAHYAYQBpAGwAYQBiAGwAZQAuACAAWQBvAHUAIABjAGEAbgAgAGMAaABlAGMAawAgAGkAdAA6ACAAYQBsAGwAIABmAGkAbABlAHMAIABvAG4AIAB5AG8AdQByACAAcwB5AHMAdABlAG0AIABoAGEAcwAgAGUAeAB0AGUAbgBzAGkAbwBuACAAewBFAFgAVAB9AC4ADQAKAEIAeQAgAHQAaABlACAAdwBhAHkALAAgAGUAdgBlAHIAeQB0AGgAaQBuAGcAIABpAHMAIABwAG8AcwBzAGkAYgBsAGUAIAB0AG8AIAByAGUAYwBvAHYAZQByACAAKAByAGUAcwB0AG8AcgBlACkALAAgAGIAdQB0ACAAeQBvAHUAIABuAGUAZQBkACAAdABvACAAZgBvAGwAbABvAHcAIABvAHUAcgAgAGkAbgBzAHQAcgB1AGMAdABpAG8AbgBzAC4AIABPAHQAaABlAHIAdwBpAHMAZQAsACAAeQBvAHUAIABjAGEAbgB0ACAAcgBlAHQAdQByAG4AIAB5AG8AdQByACAAZABhAHQAYQAgACgATgBFAFYARQBSACkALgANAAoADQAKAFsAKwBdACAAVwBoAGEAdAAgAGcAdQBhAHIAYQBuAHQAZQBlAHMAPwAgAFsAKwBdAA0ACgANAAoASQB0AHMAIABqAHUAcwB0ACAAYQAgAGIAdQBzAGkAbgBlAHMAcwAuACAAVwBlACAAYQBiAHMAbwBsAHUAdABlAGwAeQAgAGQAbwAgAG4AbwB0ACAAYwBhAHIAZQAgAGEAYgBvAHUAdAAgAHkAbwB1ACAAYQBuAGQAIAB5AG8AdQByACAAZABlAGEAbABzACwAIABlAHgAYwBlAHAAdAAgAGcAZQB0AHQAaQBuAGcAIABiAGUAbgBlAGYAaQB0AHMALgAgAEkAZgAgAHcAZQAgAGQAbwAgAG4AbwB0ACAAZABvACAAbwB1AHIAIAB3AG8AcgBrACAAYQBuAGQAIABsAGkAYQBiAGkAbABpAHQAaQBlAHMAIAAtACAAbgBvAGIAbwBkAHkAIAB3AGkAbABsACAAbgBvAHQAIABjAG8AbwBwAGUAcgBhAHQAZQAgAHcAaQB0AGgAIAB1AHMALgAgAEkAdABzACAAbgBvAHQAIABpAG4AIABvAHUAcgAgAGkAbgB0AGUAcgBlAHMAdABzAC4ADQAKAFQAbwAgAGMAaABlAGMAawAgAHQAaABlACAAYQBiAGkAbABpAHQAeQAgAG8AZgAgAHIAZQB0AHUAcgBuAGkAbgBnACAAZgBpAGwAZQBzACwAIABZAG8AdQAgAHMAaABvAHUAbABkACAAZwBvACAAdABvACAAbwB1AHIAIAB3AGUAYgBzAGkAdABlAC4AIABUAGgAZQByAGUAIAB5AG8AdQAgAGMAYQBuACAAZABlAGMAcgB5AHAAdAAgAG8AbgBlACAAZgBpAGwAZQAgAGYAbwByACAAZgByAGUAZQAuACAAVABoAGEAdAAgAGkAcwAgAG8AdQByACAAZwB1AGEAcgBhAG4AdABlAGUALgANAAoASQBmACAAeQBvAHUAIAB3AGkAbABsACAAbgBvAHQAIABjAG8AbwBwAGUAcgBhAHQAZQAgAHcAaQB0AGgAIABvAHUAcgAgAHMAZQByAHYAaQBjAGUAIAAtACAAZgBvAHIAIAB1AHMALAAgAGkAdABzACAAZABvAGUAcwAgAG4AbwB0ACAAbQBhAHQAdABlAHIALgAgAEIAdQB0ACAAeQBvAHUAIAB3AGkAbABsACAAbABvAHMAZQAgAHkAbwB1AHIAIAB0AGkAbQBlACAAYQBuAGQAIABkAGEAdABhACwAIABjAGEAdQBzAGUAIABqAHUAcwB0ACAAdwBlACAAaABhAHYAZQAgAHQAaABlACAAcAByAGkAdgBhAHQAZQAgAGsAZQB5AC4AIABJAG4AIABwAHIAYQBjAHQAaQBjAGUAIAAtACAAdABpAG0AZQAgAGkAcwAgAG0AdQBjAGgAIABtAG8AcgBlACAAdgBhAGwAdQBhAGIAbABlACAAdABoAGEAbgAgAG0AbwBuAGUAeQAuAA0ACgANAAoAWwArAF0AIABIAG8AdwAgAHQAbwAgAGcAZQB0ACAAYQBjAGMAZQBzAHMAIABvAG4AIAB3AGUAYgBzAGkAdABlAD8AIABbACsAXQANAAoADQAKAFkAbwB1ACAAaABhAHYAZQAgAHQAdwBvACAAdwBhAHkAcwA6AA0ACgANAAoAMQApACAAWwBSAGUAYwBvAG0AbQBlAG4AZABlAGQAXQAgAFUAcwBpAG4AZwAgAGEAIABUAE8AUgAgAGIAcgBvAHcAcwBlAHIAIQANAAoAIAAgAGEAKQAgAEQAbwB3AG4AbABvAGEAZAAgAGEAbgBkACAAaQBuAHMAdABhAGwAbAAgAFQATwBSACAAYgByAG8AdwBzAGUAcgAgAGYAcgBvAG0AIAB0AGgAaQBzACAAcwBpAHQAZQA6ACAAaAB0AHQAcABzADoALwAvAHQAbwByAHAAcgBvAGoAZQBjAHQALgBvAHIAZwAvAA0ACgAgACAAYgApACAATwBwAGUAbgAgAG8AdQByACAAdwBlAGIAcwBpAHQAZQA6ACAAaAB0AHQAcAA6AC8ALwBhAHAAbABlAGIAegB1ADQANwB3AGcAYQB6AGEAcABkAHEAawBzADYAdgByAGMAdgA2AHoAYwBuAGoAcABwAGsAYgB4AGIAcgA2AHcAawBlAHQAZgA1ADYAbgBmADYAYQBxADIAbgBtAHkAbwB5AGQALgBvAG4AaQBvAG4ALwB7AFUASQBEAH0ADQAKAA0ACgAyACkAIABJAGYAIABUAE8AUgAgAGIAbABvAGMAawBlAGQAIABpAG4AIAB5AG8AdQByACAAYwBvAHUAbgB0AHIAeQAsACAAdAByAHkAIAB0AG8AIAB1AHMAZQAgAFYAUABOACEAIABCAHUAdAAgAHkAbwB1ACAAYwBhAG4AIAB1AHMAZQAgAG8AdQByACAAcwBlAGMAbwBuAGQAYQByAHkAIAB3AGUAYgBzAGkAdABlAC4AIABGAG8AcgAgAHQAaABpAHMAOgANAAoAIAAgAGEAKQAgAE8AcABlAG4AIAB5AG8AdQByACAAYQBuAHkAIABiAHIAbwB3AHMAZQByACAAKABDAGgAcgBvAG0AZQAsACAARgBpAHIAZQBmAG8AeAAsACAATwBwAGUAcgBhACwAIABJAEUALAAgAEUAZABnAGUAKQANAAoAIAAgAGIAKQAgAE8AcABlAG4AIABvAHUAcgAgAHMAZQBjAG8AbgBkAGEAcgB5ACAAdwBlAGIAcwBpAHQAZQA6ACAAaAB0AHQAcAA6AC8ALwBkAGUAYwBvAGQAZQByAC4AcgBlAC8AewBVAEkARAB9AA0ACgANAAoAVwBhAHIAbgBpAG4AZwA6ACAAcwBlAGMAbwBuAGQAYQByAHkAIAB3AGUAYgBzAGkAdABlACAAYwBhAG4AIABiAGUAIABiAGwAbwBjAGsAZQBkACwAIAB0AGgAYQB0AHMAIAB3AGgAeQAgAGYAaQByAHMAdAAgAHYAYQByAGkAYQBuAHQAIABtAHUAYwBoACAAYgBlAHQAdABlAHIAIABhAG4AZAAgAG0AbwByAGUAIABhAHYAYQBpAGwAYQBiAGwAZQAuAA0ACgANAAoAVwBoAGUAbgAgAHkAbwB1ACAAbwBwAGUAbgAgAG8AdQByACAAdwBlAGIAcwBpAHQAZQAsACAAcAB1AHQAIAB0AGgAZQAgAGYAbwBsAGwAbwB3AGkAbgBnACAAZABhAHQAYQAgAGkAbgAgAHQAaABlACAAaQBuAHAAdQB0ACAAZgBvAHIAbQA6AA0ACgBLAGUAeQA6AA0ACgANAAoADQAKAHsASwBFAFkAfQANAAoADQAKAA0ACgAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ALQAtAC0ADQAKAA0ACgAhACEAIQAgAEQAQQBOAEcARQBSACAAIQAhACEADQAKAEQATwBOACcAVAAgAHQAcgB5ACAAdABvACAAYwBoAGEAbgBnAGUAIABmAGkAbABlAHMAIABiAHkAIAB5AG8AdQByAHMAZQBsAGYALAAgAEQATwBOACcAVAAgAHUAcwBlACAAYQBuAHkAIAB0AGgAaQByAGQAIABwAGEAcgB0AHkAIABzAG8AZgB0AHcAYQByAGUAIABmAG8AcgAgAHIAZQBzAHQAbwByAGkAbgBnACAAeQBvAHUAcgAgAGQAYQB0AGEAIABvAHIAIABhAG4AdABpAHYAaQByAHUAcwAgAHMAbwBsAHUAdABpAG8AbgBzACAALQAgAGkAdABzACAAbQBhAHkAIABlAG4AdABhAGkAbAAgAGQAYQBtAGEAZwBlACAAbwBmACAAdABoAGUAIABwAHIAaQB2AGEAdABlACAAawBlAHkAIABhAG4AZAAsACAAYQBzACAAcgBlAHMAdQBsAHQALAAgAFQAaABlACAATABvAHMAcwAgAGEAbABsACAAZABhAHQAYQAuAA0ACgAhACEAIQAgACEAIQAhACAAIQAhACEADQAKAE8ATgBFACAATQBPAFIARQAgAFQASQBNAEUAOgAgAEkAdABzACAAaQBuACAAeQBvAHUAcgAgAGkAbgB0AGUAcgBlAHMAdABzACAAdABvACAAZwBlAHQAIAB5AG8AdQByACAAZgBpAGwAZQBzACAAYgBhAGMAawAuACAARgByAG8AbQAgAG8AdQByACAAcwBpAGQAZQAsACAAdwBlACAAKAB0AGgAZQAgAGIAZQBzAHQAIABzAHAAZQBjAGkAYQBsAGkAcwB0AHMAKQAgAG0AYQBrAGUAIABlAHYAZQByAHkAdABoAGkAbgBnACAAZgBvAHIAIAByAGUAcwB0AG8AcgBpAG4AZwAsACAAYgB1AHQAIABwAGwAZQBhAHMAZQAgAHMAaABvAHUAbABkACAAbgBvAHQAIABpAG4AdABlAHIAZgBlAHIAZQAuAA0ACgAhACEAIQAgACEAIQAhACAAIQAhACEAAAA=") returned 5589 [0081.041] CryptStringToBinaryW (in: pszString="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", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0081.042] CryptStringToBinaryW (in: pszString="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", cchString=0x0, dwFlags=0x1, pbBinary=0x1193788, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1193788, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0081.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d3e8, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 17 [0081.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x117d3e8, cbMultiByte=-1, lpWideCharStr=0x1190bd0, cchWideChar=17 | out: lpWideCharStr="{EXT}-readme.txt") returned 17 [0081.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1184e48, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 217 [0081.042] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x1184e48, cbMultiByte=-1, lpWideCharStr=0x1190c00, cchWideChar=217 | out: lpWideCharStr="QQBsAGwAIABvAGYAIAB5AG8AdQByACAAZgBpAGwAZQBzACAAYQByAGUAIABlAG4AYwByAHkAcAB0AGUAZAAhAA0ACgANAAoARgBpAG4AZAAgAHsARQBYAFQAfQAtAHIAZQBhAGQAbQBlAC4AdAB4AHQAIABhAG4AZAAgAGYAbwBsAGwAbwB3ACAAaQBuAHMAdAB1AGMAdABpAG8AbgBzAAAA") returned 217 [0081.042] CryptStringToBinaryW (in: pszString="QQBsAGwAIABvAGYAIAB5AG8AdQByACAAZgBpAGwAZQBzACAAYQByAGUAIABlAG4AYwByAHkAcAB0AGUAZAAhAA0ACgANAAoARgBpAG4AZAAgAHsARQBYAFQAfQAtAHIAZQBhAGQAbQBlAC4AdAB4AHQAIABhAG4AZAAgAGYAbwBsAGwAbwB3ACAAaQBuAHMAdAB1AGMAdABpAG8AbgBzAAAA", cchString=0x0, dwFlags=0x1, pbBinary=0x0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0081.042] CryptStringToBinaryW (in: pszString="QQBsAGwAIABvAGYAIAB5AG8AdQByACAAZgBpAGwAZQBzACAAYQByAGUAIABlAG4AYwByAHkAcAB0AGUAZAAhAA0ACgANAAoARgBpAG4AZAAgAHsARQBYAFQAfQAtAHIAZQBhAGQAbQBlAC4AdAB4AHQAIABhAG4AZAAgAGYAbwBsAGwAbwB3ACAAaQBuAHMAdAB1AGMAdABpAG8AbgBzAAAA", cchString=0x0, dwFlags=0x1, pbBinary=0x1190dc0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0 | out: pbBinary=0x1190dc0, pcbBinary=0x43fca8, pdwSkip=0x0, pdwFlags=0x0) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190c00) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d6c8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d6e8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1184e48) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d648) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d628) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d3e8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d668) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183868) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d7a8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dff0) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d5e8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0c0) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d5a8) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df60) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d588) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df90) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d468) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0e0) returned 1 [0081.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d568) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e060) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d5c8) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1f0) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d428) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1e0) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d788) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183840) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d488) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d768) returned 1 [0081.043] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e398) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d728) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dab8) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d548) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d528) returned 1 [0081.052] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e170) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d508) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e150) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d708) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db90) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d4c8) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db78) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d4a8) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2b0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d4e8) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117daa0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d608) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2a0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d408) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1d0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d748) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d188) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d448) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db48) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb00) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db18) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cae0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db60) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb20) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d9f8) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c9e0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117da10) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c820) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1c0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c8a0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e140) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c840) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e280) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c9c0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e300) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c980) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2f0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c960) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e290) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c800) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e210) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cac0) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e220) returned 1 [0081.053] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cba0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e240) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117caa0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d9e0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca40) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e270) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca00) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e230) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca80) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dad0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c940) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1a0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb60) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e318) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cbe0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1b0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c9a0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2e0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb40) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e260) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca20) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2d0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c880) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e190) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c900) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2c0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c8c0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e160) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca60) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e180) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb80) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e250) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c920) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dde0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c8e0) returned 1 [0081.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db30) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cbc0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117da58) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c860) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ddd0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cc20) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dee0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cf00) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ded0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cee0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dea0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cec0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd60) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cea0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de90) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ce80) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de00) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cde0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ddc0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cd00) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd50) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cdc0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dec0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cce0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd40) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cfa0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd70) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ce20) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ddb0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cd80) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117deb0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ce60) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de80) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ce40) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de70) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cc60) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de50) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cf80) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de30) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cda0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd80) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cd40) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dda0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ce00) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ddf0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ccc0) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de20) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cf60) returned 1 [0081.055] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117db00) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cd60) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de60) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cca0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd30) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cc40) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dd90) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cf40) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df00) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cf20) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de40) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cc00) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117de10) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cc80) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117def0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cd20) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dcf8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffb70) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dce8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffb50) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dcd8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffb30) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dcc8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffb10) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dcb8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffcd0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dca8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffab0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dc98) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff990) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dc88) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa90) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dc78) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff9d0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dba8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffad0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dae8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff930) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d9c8) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffaf0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d988) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffcb0) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d970) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffc50) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d958) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa70) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d940) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff910) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d928) returned 1 [0081.056] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff970) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d910) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffc10) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d8f8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff9b0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d8e0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa30) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d8d0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffbf0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d898) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa50) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d880) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffc90) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d868) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffbd0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d858) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff9f0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d848) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffb90) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d830) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff950) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d820) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa10) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d6a8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffc70) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d7f8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffbb0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d7e0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffc30) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffc8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff8c8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffb0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff8a8) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffa0) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ff888) returned 1 [0081.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fff88) returned 1 [0081.058] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc08 | out: phkResult=0x43fc08*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.058] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc1c | out: phkResult=0x43fc1c*=0x0) returned 0x2 [0081.059] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.059] timeGetTime () returned 0x1f4273a [0081.059] Sleep (dwMilliseconds=0x1) [0081.065] timeGetTime () returned 0x1f42740 [0081.065] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.065] timeGetTime () returned 0x1f42740 [0081.065] Sleep (dwMilliseconds=0x1) [0081.073] timeGetTime () returned 0x1f42748 [0081.073] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.073] timeGetTime () returned 0x1f42748 [0081.073] Sleep (dwMilliseconds=0x1) [0081.076] timeGetTime () returned 0x1f4274a [0081.076] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.076] timeGetTime () returned 0x1f4274a [0081.076] Sleep (dwMilliseconds=0x1) [0081.078] timeGetTime () returned 0x1f4274c [0081.078] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.078] timeGetTime () returned 0x1f4274c [0081.078] Sleep (dwMilliseconds=0x1) [0081.106] timeGetTime () returned 0x1f42769 [0081.106] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.106] timeGetTime () returned 0x1f42769 [0081.106] Sleep (dwMilliseconds=0x1) [0081.192] timeGetTime () returned 0x1f427bf [0081.192] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.192] timeGetTime () returned 0x1f427bf [0081.192] Sleep (dwMilliseconds=0x1) [0081.207] timeGetTime () returned 0x1f427ce [0081.207] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.207] timeGetTime () returned 0x1f427ce [0081.207] Sleep (dwMilliseconds=0x1) [0081.216] timeGetTime () returned 0x1f427d7 [0081.216] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.216] timeGetTime () returned 0x1f427d7 [0081.216] Sleep (dwMilliseconds=0x1) [0081.220] timeGetTime () returned 0x1f427db [0081.220] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.220] timeGetTime () returned 0x1f427db [0081.220] Sleep (dwMilliseconds=0x1) [0081.225] timeGetTime () returned 0x1f427df [0081.225] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.225] timeGetTime () returned 0x1f427df [0081.225] Sleep (dwMilliseconds=0x1) [0081.232] timeGetTime () returned 0x1f427e7 [0081.232] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.232] timeGetTime () returned 0x1f427e7 [0081.232] Sleep (dwMilliseconds=0x1) [0081.253] timeGetTime () returned 0x1f427fb [0081.253] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.279] timeGetTime () returned 0x1f42814 [0081.279] Sleep (dwMilliseconds=0x1) [0081.284] timeGetTime () returned 0x1f4281b [0081.284] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.284] timeGetTime () returned 0x1f4281b [0081.285] Sleep (dwMilliseconds=0x1) [0081.287] timeGetTime () returned 0x1f4281d [0081.287] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.287] timeGetTime () returned 0x1f4281d [0081.287] Sleep (dwMilliseconds=0x1) [0081.294] timeGetTime () returned 0x1f42823 [0081.294] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.294] timeGetTime () returned 0x1f42823 [0081.294] Sleep (dwMilliseconds=0x1) [0081.329] timeGetTime () returned 0x1f42848 [0081.329] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.329] timeGetTime () returned 0x1f42848 [0081.329] Sleep (dwMilliseconds=0x1) [0081.332] timeGetTime () returned 0x1f4284a [0081.332] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.332] timeGetTime () returned 0x1f4284a [0081.332] Sleep (dwMilliseconds=0x1) [0081.333] timeGetTime () returned 0x1f4284b [0081.334] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.334] timeGetTime () returned 0x1f4284b [0081.334] Sleep (dwMilliseconds=0x1) [0081.338] timeGetTime () returned 0x1f42851 [0081.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.338] timeGetTime () returned 0x1f42851 [0081.338] Sleep (dwMilliseconds=0x1) [0081.346] timeGetTime () returned 0x1f42859 [0081.346] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.346] timeGetTime () returned 0x1f42859 [0081.346] Sleep (dwMilliseconds=0x1) [0081.353] timeGetTime () returned 0x1f4285f [0081.353] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.353] timeGetTime () returned 0x1f4285f [0081.353] Sleep (dwMilliseconds=0x1) [0081.361] timeGetTime () returned 0x1f42868 [0081.361] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.361] timeGetTime () returned 0x1f42868 [0081.361] Sleep (dwMilliseconds=0x1) [0081.364] timeGetTime () returned 0x1f4286b [0081.364] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.364] timeGetTime () returned 0x1f4286b [0081.364] Sleep (dwMilliseconds=0x1) [0081.367] timeGetTime () returned 0x1f4286e [0081.367] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.367] timeGetTime () returned 0x1f4286e [0081.367] Sleep (dwMilliseconds=0x1) [0081.373] timeGetTime () returned 0x1f42873 [0081.373] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.373] timeGetTime () returned 0x1f42873 [0081.373] Sleep (dwMilliseconds=0x1) [0081.375] timeGetTime () returned 0x1f42876 [0081.375] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.375] timeGetTime () returned 0x1f42876 [0081.375] Sleep (dwMilliseconds=0x1) [0081.383] timeGetTime () returned 0x1f4287d [0081.383] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.383] timeGetTime () returned 0x1f4287d [0081.383] Sleep (dwMilliseconds=0x1) [0081.387] timeGetTime () returned 0x1f42882 [0081.387] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.387] timeGetTime () returned 0x1f42882 [0081.387] Sleep (dwMilliseconds=0x1) [0081.413] timeGetTime () returned 0x1f4289a [0081.413] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.413] timeGetTime () returned 0x1f4289c [0081.413] Sleep (dwMilliseconds=0x1) [0081.432] timeGetTime () returned 0x1f428af [0081.432] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.432] timeGetTime () returned 0x1f428af [0081.432] Sleep (dwMilliseconds=0x1) [0081.446] timeGetTime () returned 0x1f428bd [0081.446] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.446] timeGetTime () returned 0x1f428bd [0081.446] Sleep (dwMilliseconds=0x1) [0081.449] timeGetTime () returned 0x1f428c0 [0081.449] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.449] timeGetTime () returned 0x1f428c0 [0081.449] Sleep (dwMilliseconds=0x1) [0081.454] timeGetTime () returned 0x1f428c4 [0081.454] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.454] timeGetTime () returned 0x1f428c4 [0081.454] Sleep (dwMilliseconds=0x1) [0081.457] timeGetTime () returned 0x1f428c8 [0081.457] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.457] timeGetTime () returned 0x1f428c8 [0081.457] Sleep (dwMilliseconds=0x1) [0081.462] timeGetTime () returned 0x1f428cd [0081.462] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.463] timeGetTime () returned 0x1f428cd [0081.463] Sleep (dwMilliseconds=0x1) [0081.469] timeGetTime () returned 0x1f428d4 [0081.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.470] timeGetTime () returned 0x1f428d4 [0081.470] Sleep (dwMilliseconds=0x1) [0081.472] timeGetTime () returned 0x1f428d6 [0081.472] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.472] timeGetTime () returned 0x1f428d6 [0081.472] Sleep (dwMilliseconds=0x1) [0081.474] timeGetTime () returned 0x1f428d9 [0081.474] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.474] timeGetTime () returned 0x1f428d9 [0081.474] Sleep (dwMilliseconds=0x1) [0081.482] timeGetTime () returned 0x1f428e0 [0081.482] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.482] timeGetTime () returned 0x1f428e1 [0081.482] Sleep (dwMilliseconds=0x1) [0081.512] timeGetTime () returned 0x1f428ff [0081.512] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.512] timeGetTime () returned 0x1f428ff [0081.512] Sleep (dwMilliseconds=0x1) [0081.527] timeGetTime () returned 0x1f4290d [0081.527] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.529] timeGetTime () returned 0x1f4290f [0081.529] Sleep (dwMilliseconds=0x1) [0081.531] timeGetTime () returned 0x1f42911 [0081.531] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.531] timeGetTime () returned 0x1f42911 [0081.531] Sleep (dwMilliseconds=0x1) [0081.534] timeGetTime () returned 0x1f42914 [0081.534] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.534] timeGetTime () returned 0x1f42914 [0081.534] Sleep (dwMilliseconds=0x1) [0081.538] timeGetTime () returned 0x1f42919 [0081.539] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.539] timeGetTime () returned 0x1f42919 [0081.539] Sleep (dwMilliseconds=0x1) [0081.542] timeGetTime () returned 0x1f4291d [0081.542] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.542] timeGetTime () returned 0x1f4291d [0081.542] Sleep (dwMilliseconds=0x1) [0081.545] timeGetTime () returned 0x1f42920 [0081.545] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.545] timeGetTime () returned 0x1f42920 [0081.545] Sleep (dwMilliseconds=0x1) [0081.549] timeGetTime () returned 0x1f42924 [0081.549] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.549] timeGetTime () returned 0x1f42924 [0081.549] Sleep (dwMilliseconds=0x1) [0081.553] timeGetTime () returned 0x1f42927 [0081.553] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.553] timeGetTime () returned 0x1f42927 [0081.553] Sleep (dwMilliseconds=0x1) [0081.559] timeGetTime () returned 0x1f4292d [0081.559] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.559] timeGetTime () returned 0x1f4292d [0081.559] Sleep (dwMilliseconds=0x1) [0081.561] timeGetTime () returned 0x1f4292e [0081.561] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.561] timeGetTime () returned 0x1f4292e [0081.561] Sleep (dwMilliseconds=0x1) [0081.563] timeGetTime () returned 0x1f42931 [0081.563] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.563] timeGetTime () returned 0x1f42931 [0081.563] Sleep (dwMilliseconds=0x1) [0081.586] timeGetTime () returned 0x1f42949 [0081.586] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.586] timeGetTime () returned 0x1f42949 [0081.587] Sleep (dwMilliseconds=0x1) [0081.593] timeGetTime () returned 0x1f4294f [0081.594] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.594] timeGetTime () returned 0x1f4294f [0081.596] Sleep (dwMilliseconds=0x1) [0081.601] timeGetTime () returned 0x1f42958 [0081.601] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.601] timeGetTime () returned 0x1f42958 [0081.601] Sleep (dwMilliseconds=0x1) [0081.608] timeGetTime () returned 0x1f4295f [0081.608] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.608] timeGetTime () returned 0x1f4295f [0081.608] Sleep (dwMilliseconds=0x1) [0081.616] timeGetTime () returned 0x1f42967 [0081.616] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.616] timeGetTime () returned 0x1f42967 [0081.616] Sleep (dwMilliseconds=0x1) [0081.648] timeGetTime () returned 0x1f42987 [0081.648] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.648] timeGetTime () returned 0x1f42987 [0081.649] Sleep (dwMilliseconds=0x1) [0081.657] timeGetTime () returned 0x1f42990 [0081.657] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.657] timeGetTime () returned 0x1f42990 [0081.657] Sleep (dwMilliseconds=0x1) [0081.660] timeGetTime () returned 0x1f42993 [0081.660] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.660] timeGetTime () returned 0x1f42993 [0081.660] Sleep (dwMilliseconds=0x1) [0081.663] timeGetTime () returned 0x1f42995 [0081.663] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.663] timeGetTime () returned 0x1f42995 [0081.663] Sleep (dwMilliseconds=0x1) [0081.668] timeGetTime () returned 0x1f4299a [0081.668] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.668] timeGetTime () returned 0x1f4299a [0081.668] Sleep (dwMilliseconds=0x1) [0081.671] timeGetTime () returned 0x1f4299e [0081.671] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.671] timeGetTime () returned 0x1f4299e [0081.671] Sleep (dwMilliseconds=0x1) [0081.674] timeGetTime () returned 0x1f429a0 [0081.674] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.674] timeGetTime () returned 0x1f429a0 [0081.674] Sleep (dwMilliseconds=0x1) [0081.686] timeGetTime () returned 0x1f429ac [0081.686] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.686] timeGetTime () returned 0x1f429ac [0081.686] Sleep (dwMilliseconds=0x1) [0081.703] timeGetTime () returned 0x1f429bd [0081.703] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.703] timeGetTime () returned 0x1f429bd [0081.703] Sleep (dwMilliseconds=0x1) [0081.705] timeGetTime () returned 0x1f429bf [0081.705] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.705] timeGetTime () returned 0x1f429bf [0081.705] Sleep (dwMilliseconds=0x1) [0081.710] timeGetTime () returned 0x1f429c4 [0081.710] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.710] timeGetTime () returned 0x1f429c4 [0081.710] Sleep (dwMilliseconds=0x1) [0081.737] timeGetTime () returned 0x1f429e0 [0081.737] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.737] timeGetTime () returned 0x1f429e0 [0081.737] Sleep (dwMilliseconds=0x1) [0081.741] timeGetTime () returned 0x1f429e4 [0081.741] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.742] timeGetTime () returned 0x1f429e4 [0081.742] Sleep (dwMilliseconds=0x1) [0081.745] timeGetTime () returned 0x1f429e7 [0081.745] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.745] timeGetTime () returned 0x1f429e8 [0081.745] Sleep (dwMilliseconds=0x1) [0081.752] timeGetTime () returned 0x1f429ee [0081.752] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.752] timeGetTime () returned 0x1f429ee [0081.752] Sleep (dwMilliseconds=0x1) [0081.802] timeGetTime () returned 0x1f42a20 [0081.802] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.802] timeGetTime () returned 0x1f42a21 [0081.802] Sleep (dwMilliseconds=0x1) [0081.840] timeGetTime () returned 0x1f42a47 [0081.840] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.840] timeGetTime () returned 0x1f42a47 [0081.840] Sleep (dwMilliseconds=0x1) [0081.848] timeGetTime () returned 0x1f42a4f [0081.848] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.848] timeGetTime () returned 0x1f42a4f [0081.848] Sleep (dwMilliseconds=0x1) [0081.851] timeGetTime () returned 0x1f42a52 [0081.851] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.852] timeGetTime () returned 0x1f42a52 [0081.852] Sleep (dwMilliseconds=0x1) [0081.854] timeGetTime () returned 0x1f42a55 [0081.854] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.854] timeGetTime () returned 0x1f42a55 [0081.855] Sleep (dwMilliseconds=0x1) [0081.861] timeGetTime () returned 0x1f42a5c [0081.861] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.861] timeGetTime () returned 0x1f42a5c [0081.861] Sleep (dwMilliseconds=0x1) [0081.877] timeGetTime () returned 0x1f42a68 [0081.877] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.877] timeGetTime () returned 0x1f42a68 [0081.877] Sleep (dwMilliseconds=0x1) [0081.915] timeGetTime () returned 0x1f42a91 [0081.915] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.915] timeGetTime () returned 0x1f42a91 [0081.915] Sleep (dwMilliseconds=0x1) [0081.918] timeGetTime () returned 0x1f42a95 [0081.918] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.918] timeGetTime () returned 0x1f42a95 [0081.918] Sleep (dwMilliseconds=0x1) [0081.927] timeGetTime () returned 0x1f42a9e [0081.927] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.927] timeGetTime () returned 0x1f42a9e [0081.927] Sleep (dwMilliseconds=0x1) [0081.930] timeGetTime () returned 0x1f42aa1 [0081.930] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.930] timeGetTime () returned 0x1f42aa1 [0081.930] Sleep (dwMilliseconds=0x1) [0081.934] timeGetTime () returned 0x1f42aa5 [0081.934] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.934] timeGetTime () returned 0x1f42aa5 [0081.934] Sleep (dwMilliseconds=0x1) [0081.936] timeGetTime () returned 0x1f42aa7 [0081.936] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.936] timeGetTime () returned 0x1f42aa7 [0081.936] Sleep (dwMilliseconds=0x1) [0081.981] timeGetTime () returned 0x1f42ad4 [0081.981] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.981] timeGetTime () returned 0x1f42ad4 [0081.981] Sleep (dwMilliseconds=0x1) [0081.985] timeGetTime () returned 0x1f42ad8 [0081.985] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.985] timeGetTime () returned 0x1f42ad8 [0081.985] Sleep (dwMilliseconds=0x1) [0081.988] timeGetTime () returned 0x1f42adb [0081.988] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.988] timeGetTime () returned 0x1f42adb [0081.988] Sleep (dwMilliseconds=0x1) [0081.994] timeGetTime () returned 0x1f42ae0 [0081.994] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.994] timeGetTime () returned 0x1f42ae1 [0081.994] Sleep (dwMilliseconds=0x1) [0081.997] timeGetTime () returned 0x1f42ae3 [0081.997] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.997] timeGetTime () returned 0x1f42ae3 [0081.997] Sleep (dwMilliseconds=0x1) [0081.998] timeGetTime () returned 0x1f42ae5 [0081.999] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0081.999] timeGetTime () returned 0x1f42ae5 [0081.999] Sleep (dwMilliseconds=0x1) [0082.001] timeGetTime () returned 0x1f42ae8 [0082.001] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.001] timeGetTime () returned 0x1f42ae8 [0082.001] Sleep (dwMilliseconds=0x1) [0082.005] timeGetTime () returned 0x1f42aeb [0082.005] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.005] timeGetTime () returned 0x1f42aeb [0082.005] Sleep (dwMilliseconds=0x1) [0082.007] timeGetTime () returned 0x1f42aed [0082.007] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.007] timeGetTime () returned 0x1f42aed [0082.007] Sleep (dwMilliseconds=0x1) [0082.066] timeGetTime () returned 0x1f42b28 [0082.066] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.066] timeGetTime () returned 0x1f42b28 [0082.066] Sleep (dwMilliseconds=0x1) [0082.073] timeGetTime () returned 0x1f42b30 [0082.073] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.073] timeGetTime () returned 0x1f42b30 [0082.073] Sleep (dwMilliseconds=0x1) [0082.089] timeGetTime () returned 0x1f42b40 [0082.089] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.089] timeGetTime () returned 0x1f42b40 [0082.089] Sleep (dwMilliseconds=0x1) [0082.095] timeGetTime () returned 0x1f42b46 [0082.095] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.095] timeGetTime () returned 0x1f42b46 [0082.095] Sleep (dwMilliseconds=0x1) [0082.101] timeGetTime () returned 0x1f42b4c [0082.101] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.101] timeGetTime () returned 0x1f42b4c [0082.101] Sleep (dwMilliseconds=0x1) [0082.107] timeGetTime () returned 0x1f42b52 [0082.107] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.108] timeGetTime () returned 0x1f42b52 [0082.108] Sleep (dwMilliseconds=0x1) [0082.115] timeGetTime () returned 0x1f42b5a [0082.115] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.115] timeGetTime () returned 0x1f42b5a [0082.115] Sleep (dwMilliseconds=0x1) [0082.141] timeGetTime () returned 0x1f42b74 [0082.141] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.141] timeGetTime () returned 0x1f42b74 [0082.141] Sleep (dwMilliseconds=0x1) [0082.155] timeGetTime () returned 0x1f42b82 [0082.155] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.155] timeGetTime () returned 0x1f42b82 [0082.155] Sleep (dwMilliseconds=0x1) [0082.158] timeGetTime () returned 0x1f42b85 [0082.158] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.158] timeGetTime () returned 0x1f42b85 [0082.158] Sleep (dwMilliseconds=0x1) [0082.161] timeGetTime () returned 0x1f42b88 [0082.161] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.161] timeGetTime () returned 0x1f42b88 [0082.161] Sleep (dwMilliseconds=0x1) [0082.169] timeGetTime () returned 0x1f42b8f [0082.169] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.169] timeGetTime () returned 0x1f42b8f [0082.169] Sleep (dwMilliseconds=0x1) [0082.207] timeGetTime () returned 0x1f42bb6 [0082.207] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.207] timeGetTime () returned 0x1f42bb6 [0082.207] Sleep (dwMilliseconds=0x1) [0082.217] timeGetTime () returned 0x1f42bbf [0082.217] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.217] timeGetTime () returned 0x1f42bc0 [0082.217] Sleep (dwMilliseconds=0x1) [0082.224] timeGetTime () returned 0x1f42bc6 [0082.224] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.224] timeGetTime () returned 0x1f42bc6 [0082.224] Sleep (dwMilliseconds=0x1) [0082.227] timeGetTime () returned 0x1f42bc9 [0082.227] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.227] timeGetTime () returned 0x1f42bc9 [0082.227] Sleep (dwMilliseconds=0x1) [0082.234] timeGetTime () returned 0x1f42bd1 [0082.234] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.234] timeGetTime () returned 0x1f42bd1 [0082.234] Sleep (dwMilliseconds=0x1) [0082.238] timeGetTime () returned 0x1f42bd4 [0082.238] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.238] timeGetTime () returned 0x1f42bd4 [0082.238] Sleep (dwMilliseconds=0x1) [0082.239] timeGetTime () returned 0x1f42bd6 [0082.239] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.239] timeGetTime () returned 0x1f42bd6 [0082.239] Sleep (dwMilliseconds=0x1) [0082.243] timeGetTime () returned 0x1f42bd9 [0082.243] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.243] timeGetTime () returned 0x1f42bd9 [0082.243] Sleep (dwMilliseconds=0x1) [0082.245] timeGetTime () returned 0x1f42bdc [0082.245] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.245] timeGetTime () returned 0x1f42bdc [0082.245] Sleep (dwMilliseconds=0x1) [0082.248] timeGetTime () returned 0x1f42bde [0082.248] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.248] timeGetTime () returned 0x1f42bde [0082.248] Sleep (dwMilliseconds=0x1) [0082.249] timeGetTime () returned 0x1f42be0 [0082.249] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.249] timeGetTime () returned 0x1f42be0 [0082.250] Sleep (dwMilliseconds=0x1) [0082.252] timeGetTime () returned 0x1f42be2 [0082.252] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.252] timeGetTime () returned 0x1f42be3 [0082.252] Sleep (dwMilliseconds=0x1) [0082.273] timeGetTime () returned 0x1f42bf8 [0082.273] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.273] timeGetTime () returned 0x1f42bf8 [0082.273] Sleep (dwMilliseconds=0x1) [0082.280] timeGetTime () returned 0x1f42bff [0082.280] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.280] timeGetTime () returned 0x1f42bff [0082.280] Sleep (dwMilliseconds=0x1) [0082.330] timeGetTime () returned 0x1f42c31 [0082.330] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.330] timeGetTime () returned 0x1f42c31 [0082.330] Sleep (dwMilliseconds=0x1) [0082.334] timeGetTime () returned 0x1f42c34 [0082.334] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.334] timeGetTime () returned 0x1f42c34 [0082.334] Sleep (dwMilliseconds=0x1) [0082.335] timeGetTime () returned 0x1f42c35 [0082.335] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.335] timeGetTime () returned 0x1f42c35 [0082.335] Sleep (dwMilliseconds=0x1) [0082.338] timeGetTime () returned 0x1f42c39 [0082.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.338] timeGetTime () returned 0x1f42c39 [0082.338] Sleep (dwMilliseconds=0x1) [0082.344] timeGetTime () returned 0x1f42c3f [0082.344] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.344] timeGetTime () returned 0x1f42c3f [0082.344] Sleep (dwMilliseconds=0x1) [0082.348] timeGetTime () returned 0x1f42c43 [0082.348] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.348] timeGetTime () returned 0x1f42c43 [0082.348] Sleep (dwMilliseconds=0x1) [0082.351] timeGetTime () returned 0x1f42c45 [0082.351] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.351] timeGetTime () returned 0x1f42c45 [0082.351] Sleep (dwMilliseconds=0x1) [0082.359] timeGetTime () returned 0x1f42c4d [0082.359] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.359] timeGetTime () returned 0x1f42c4d [0082.359] Sleep (dwMilliseconds=0x1) [0082.360] timeGetTime () returned 0x1f42c4f [0082.360] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.360] timeGetTime () returned 0x1f42c4f [0082.360] Sleep (dwMilliseconds=0x1) [0082.362] timeGetTime () returned 0x1f42c50 [0082.362] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.362] timeGetTime () returned 0x1f42c50 [0082.362] Sleep (dwMilliseconds=0x1) [0082.365] timeGetTime () returned 0x1f42c53 [0082.365] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.365] timeGetTime () returned 0x1f42c53 [0082.365] Sleep (dwMilliseconds=0x1) [0082.369] timeGetTime () returned 0x1f42c57 [0082.369] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.369] timeGetTime () returned 0x1f42c57 [0082.369] Sleep (dwMilliseconds=0x1) [0082.371] timeGetTime () returned 0x1f42c5a [0082.371] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.371] timeGetTime () returned 0x1f42c5a [0082.371] Sleep (dwMilliseconds=0x1) [0082.416] timeGetTime () returned 0x1f42c86 [0082.416] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.416] timeGetTime () returned 0x1f42c86 [0082.416] Sleep (dwMilliseconds=0x1) [0082.418] timeGetTime () returned 0x1f42c89 [0082.418] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.418] timeGetTime () returned 0x1f42c89 [0082.418] Sleep (dwMilliseconds=0x1) [0082.422] timeGetTime () returned 0x1f42c8d [0082.422] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.422] timeGetTime () returned 0x1f42c8d [0082.422] Sleep (dwMilliseconds=0x1) [0082.427] timeGetTime () returned 0x1f42c91 [0082.427] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.427] timeGetTime () returned 0x1f42c92 [0082.427] Sleep (dwMilliseconds=0x1) [0082.430] timeGetTime () returned 0x1f42c94 [0082.430] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.430] timeGetTime () returned 0x1f42c95 [0082.430] Sleep (dwMilliseconds=0x1) [0082.434] timeGetTime () returned 0x1f42c97 [0082.434] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.434] timeGetTime () returned 0x1f42c97 [0082.434] Sleep (dwMilliseconds=0x1) [0082.436] timeGetTime () returned 0x1f42c9a [0082.436] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.436] timeGetTime () returned 0x1f42c9a [0082.436] Sleep (dwMilliseconds=0x1) [0082.439] timeGetTime () returned 0x1f42c9d [0082.439] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.439] timeGetTime () returned 0x1f42c9d [0082.439] Sleep (dwMilliseconds=0x1) [0082.441] timeGetTime () returned 0x1f42ca0 [0082.441] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.441] timeGetTime () returned 0x1f42ca0 [0082.441] Sleep (dwMilliseconds=0x1) [0082.443] timeGetTime () returned 0x1f42ca2 [0082.443] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.443] timeGetTime () returned 0x1f42ca2 [0082.443] Sleep (dwMilliseconds=0x1) [0082.447] timeGetTime () returned 0x1f42ca5 [0082.447] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.447] timeGetTime () returned 0x1f42ca5 [0082.447] Sleep (dwMilliseconds=0x1) [0082.448] timeGetTime () returned 0x1f42ca7 [0082.448] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.448] timeGetTime () returned 0x1f42ca7 [0082.448] Sleep (dwMilliseconds=0x1) [0082.450] timeGetTime () returned 0x1f42ca9 [0082.451] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.451] timeGetTime () returned 0x1f42ca9 [0082.451] Sleep (dwMilliseconds=0x1) [0082.453] timeGetTime () returned 0x1f42cac [0082.453] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.453] timeGetTime () returned 0x1f42cac [0082.453] Sleep (dwMilliseconds=0x1) [0082.496] timeGetTime () returned 0x1f42cd6 [0082.496] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.496] timeGetTime () returned 0x1f42cd6 [0082.496] Sleep (dwMilliseconds=0x1) [0082.502] timeGetTime () returned 0x1f42cdc [0082.502] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.502] timeGetTime () returned 0x1f42cdc [0082.502] Sleep (dwMilliseconds=0x1) [0082.507] timeGetTime () returned 0x1f42ce1 [0082.507] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.507] timeGetTime () returned 0x1f42ce1 [0082.507] Sleep (dwMilliseconds=0x1) [0082.524] timeGetTime () returned 0x1f42cf3 [0082.524] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.525] timeGetTime () returned 0x1f42cf3 [0082.525] Sleep (dwMilliseconds=0x1) [0082.531] timeGetTime () returned 0x1f42cfa [0082.531] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.531] timeGetTime () returned 0x1f42cfa [0082.531] Sleep (dwMilliseconds=0x1) [0082.534] timeGetTime () returned 0x1f42cfd [0082.534] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.534] timeGetTime () returned 0x1f42cfd [0082.534] Sleep (dwMilliseconds=0x1) [0082.543] timeGetTime () returned 0x1f42d05 [0082.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.543] timeGetTime () returned 0x1f42d05 [0082.543] Sleep (dwMilliseconds=0x1) [0082.548] timeGetTime () returned 0x1f42d0b [0082.548] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.548] timeGetTime () returned 0x1f42d0b [0082.548] Sleep (dwMilliseconds=0x1) [0082.553] timeGetTime () returned 0x1f42d0f [0082.553] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.553] timeGetTime () returned 0x1f42d0f [0082.553] Sleep (dwMilliseconds=0x1) [0082.556] timeGetTime () returned 0x1f42d12 [0082.556] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.556] timeGetTime () returned 0x1f42d12 [0082.556] Sleep (dwMilliseconds=0x1) [0082.572] timeGetTime () returned 0x1f42d23 [0082.572] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.573] timeGetTime () returned 0x1f42d23 [0082.573] Sleep (dwMilliseconds=0x1) [0082.614] timeGetTime () returned 0x1f42d4c [0082.614] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.614] timeGetTime () returned 0x1f42d4c [0082.614] Sleep (dwMilliseconds=0x1) [0082.618] timeGetTime () returned 0x1f42d51 [0082.618] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.618] timeGetTime () returned 0x1f42d51 [0082.618] Sleep (dwMilliseconds=0x1) [0082.622] timeGetTime () returned 0x1f42d55 [0082.622] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.622] timeGetTime () returned 0x1f42d55 [0082.622] Sleep (dwMilliseconds=0x1) [0082.627] timeGetTime () returned 0x1f42d59 [0082.627] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.627] timeGetTime () returned 0x1f42d59 [0082.627] Sleep (dwMilliseconds=0x1) [0082.629] timeGetTime () returned 0x1f42d5c [0082.629] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.630] timeGetTime () returned 0x1f42d5c [0082.630] Sleep (dwMilliseconds=0x1) [0082.631] timeGetTime () returned 0x1f42d5e [0082.631] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.631] timeGetTime () returned 0x1f42d5e [0082.631] Sleep (dwMilliseconds=0x1) [0082.634] timeGetTime () returned 0x1f42d60 [0082.634] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.634] timeGetTime () returned 0x1f42d60 [0082.634] Sleep (dwMilliseconds=0x1) [0082.637] timeGetTime () returned 0x1f42d64 [0082.637] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.637] timeGetTime () returned 0x1f42d64 [0082.637] Sleep (dwMilliseconds=0x1) [0082.641] timeGetTime () returned 0x1f42d68 [0082.641] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.641] timeGetTime () returned 0x1f42d68 [0082.641] Sleep (dwMilliseconds=0x1) [0082.644] timeGetTime () returned 0x1f42d6b [0082.644] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.644] timeGetTime () returned 0x1f42d6b [0082.644] Sleep (dwMilliseconds=0x1) [0082.647] timeGetTime () returned 0x1f42d6e [0082.647] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.647] timeGetTime () returned 0x1f42d6e [0082.648] Sleep (dwMilliseconds=0x1) [0082.651] timeGetTime () returned 0x1f42d71 [0082.651] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.651] timeGetTime () returned 0x1f42d71 [0082.651] Sleep (dwMilliseconds=0x1) [0082.653] timeGetTime () returned 0x1f42d73 [0082.653] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.653] timeGetTime () returned 0x1f42d73 [0082.653] Sleep (dwMilliseconds=0x1) [0082.655] timeGetTime () returned 0x1f42d75 [0082.655] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.655] timeGetTime () returned 0x1f42d75 [0082.655] Sleep (dwMilliseconds=0x1) [0082.656] timeGetTime () returned 0x1f42d77 [0082.656] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.657] timeGetTime () returned 0x1f42d77 [0082.657] Sleep (dwMilliseconds=0x1) [0082.658] timeGetTime () returned 0x1f42d79 [0082.658] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.658] timeGetTime () returned 0x1f42d79 [0082.659] Sleep (dwMilliseconds=0x1) [0082.703] timeGetTime () returned 0x1f42da6 [0082.703] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.703] timeGetTime () returned 0x1f42da6 [0082.703] Sleep (dwMilliseconds=0x1) [0082.707] timeGetTime () returned 0x1f42da9 [0082.707] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.707] timeGetTime () returned 0x1f42da9 [0082.707] Sleep (dwMilliseconds=0x1) [0082.709] timeGetTime () returned 0x1f42dac [0082.709] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.709] timeGetTime () returned 0x1f42dac [0082.709] Sleep (dwMilliseconds=0x1) [0082.715] timeGetTime () returned 0x1f42db2 [0082.715] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.715] timeGetTime () returned 0x1f42db2 [0082.715] Sleep (dwMilliseconds=0x1) [0082.718] timeGetTime () returned 0x1f42db4 [0082.718] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.718] timeGetTime () returned 0x1f42db5 [0082.718] Sleep (dwMilliseconds=0x1) [0082.722] timeGetTime () returned 0x1f42db8 [0082.722] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.722] timeGetTime () returned 0x1f42db8 [0082.722] Sleep (dwMilliseconds=0x1) [0082.724] timeGetTime () returned 0x1f42dba [0082.724] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.724] timeGetTime () returned 0x1f42dba [0082.724] Sleep (dwMilliseconds=0x1) [0082.770] timeGetTime () returned 0x1f42de9 [0082.770] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.770] timeGetTime () returned 0x1f42de9 [0082.771] Sleep (dwMilliseconds=0x1) [0082.773] timeGetTime () returned 0x1f42dec [0082.773] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.773] timeGetTime () returned 0x1f42dec [0082.774] Sleep (dwMilliseconds=0x1) [0082.776] timeGetTime () returned 0x1f42def [0082.776] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.776] timeGetTime () returned 0x1f42def [0082.776] Sleep (dwMilliseconds=0x1) [0082.781] timeGetTime () returned 0x1f42df3 [0082.781] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.781] timeGetTime () returned 0x1f42df3 [0082.781] Sleep (dwMilliseconds=0x1) [0082.784] timeGetTime () returned 0x1f42df6 [0082.784] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.784] timeGetTime () returned 0x1f42df6 [0082.784] Sleep (dwMilliseconds=0x1) [0082.789] timeGetTime () returned 0x1f42dfc [0082.789] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.789] timeGetTime () returned 0x1f42dfc [0082.789] Sleep (dwMilliseconds=0x1) [0082.792] timeGetTime () returned 0x1f42dfe [0082.792] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.792] timeGetTime () returned 0x1f42dfe [0082.792] Sleep (dwMilliseconds=0x1) [0082.795] timeGetTime () returned 0x1f42e01 [0082.795] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.795] timeGetTime () returned 0x1f42e01 [0082.795] Sleep (dwMilliseconds=0x1) [0082.800] timeGetTime () returned 0x1f42e06 [0082.800] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.800] timeGetTime () returned 0x1f42e07 [0082.800] Sleep (dwMilliseconds=0x1) [0082.806] timeGetTime () returned 0x1f42e0d [0082.806] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.806] timeGetTime () returned 0x1f42e0d [0082.806] Sleep (dwMilliseconds=0x1) [0082.809] timeGetTime () returned 0x1f42e0f [0082.809] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.809] timeGetTime () returned 0x1f42e0f [0082.809] Sleep (dwMilliseconds=0x1) [0082.811] timeGetTime () returned 0x1f42e11 [0082.811] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.811] timeGetTime () returned 0x1f42e12 [0082.811] Sleep (dwMilliseconds=0x1) [0082.837] timeGetTime () returned 0x1f42e2b [0082.837] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.837] timeGetTime () returned 0x1f42e2b [0082.837] Sleep (dwMilliseconds=0x1) [0082.841] timeGetTime () returned 0x1f42e2f [0082.841] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.841] timeGetTime () returned 0x1f42e2f [0082.841] Sleep (dwMilliseconds=0x1) [0082.844] timeGetTime () returned 0x1f42e33 [0082.844] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.844] timeGetTime () returned 0x1f42e33 [0082.844] Sleep (dwMilliseconds=0x1) [0082.848] timeGetTime () returned 0x1f42e36 [0082.848] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.848] timeGetTime () returned 0x1f42e36 [0082.848] Sleep (dwMilliseconds=0x1) [0082.851] timeGetTime () returned 0x1f42e39 [0082.851] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.851] timeGetTime () returned 0x1f42e39 [0082.851] Sleep (dwMilliseconds=0x1) [0082.854] timeGetTime () returned 0x1f42e3c [0082.854] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.854] timeGetTime () returned 0x1f42e3c [0082.854] Sleep (dwMilliseconds=0x1) [0082.857] timeGetTime () returned 0x1f42e3f [0082.857] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.857] timeGetTime () returned 0x1f42e3f [0082.857] Sleep (dwMilliseconds=0x1) [0082.859] timeGetTime () returned 0x1f42e42 [0082.859] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.859] timeGetTime () returned 0x1f42e42 [0082.859] Sleep (dwMilliseconds=0x1) [0082.864] timeGetTime () returned 0x1f42e47 [0082.865] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.865] timeGetTime () returned 0x1f42e47 [0082.865] Sleep (dwMilliseconds=0x1) [0082.866] timeGetTime () returned 0x1f42e49 [0082.866] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.866] timeGetTime () returned 0x1f42e49 [0082.866] Sleep (dwMilliseconds=0x1) [0082.869] timeGetTime () returned 0x1f42e4b [0082.869] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.869] timeGetTime () returned 0x1f42e4b [0082.869] Sleep (dwMilliseconds=0x1) [0082.916] timeGetTime () returned 0x1f42e7b [0082.916] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.916] timeGetTime () returned 0x1f42e7b [0082.916] Sleep (dwMilliseconds=0x1) [0082.920] timeGetTime () returned 0x1f42e7f [0082.920] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.920] timeGetTime () returned 0x1f42e7f [0082.920] Sleep (dwMilliseconds=0x1) [0082.923] timeGetTime () returned 0x1f42e82 [0082.923] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.923] timeGetTime () returned 0x1f42e82 [0082.923] Sleep (dwMilliseconds=0x1) [0082.928] timeGetTime () returned 0x1f42e86 [0082.928] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.928] timeGetTime () returned 0x1f42e86 [0082.928] Sleep (dwMilliseconds=0x1) [0082.929] timeGetTime () returned 0x1f42e88 [0082.930] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.930] timeGetTime () returned 0x1f42e88 [0082.930] Sleep (dwMilliseconds=0x1) [0082.932] timeGetTime () returned 0x1f42e8b [0082.932] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.932] timeGetTime () returned 0x1f42e8b [0082.932] Sleep (dwMilliseconds=0x1) [0082.936] timeGetTime () returned 0x1f42e8f [0082.936] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.936] timeGetTime () returned 0x1f42e8f [0082.936] Sleep (dwMilliseconds=0x1) [0082.981] timeGetTime () returned 0x1f42ebb [0082.981] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.981] timeGetTime () returned 0x1f42ebb [0082.981] Sleep (dwMilliseconds=0x1) [0082.984] timeGetTime () returned 0x1f42ebf [0082.984] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.984] timeGetTime () returned 0x1f42ebf [0082.984] Sleep (dwMilliseconds=0x1) [0082.988] timeGetTime () returned 0x1f42ec3 [0082.988] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0082.988] timeGetTime () returned 0x1f42ec3 [0082.988] Sleep (dwMilliseconds=0x1) [0083.001] timeGetTime () returned 0x1f42ecf [0083.001] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.001] timeGetTime () returned 0x1f42ecf [0083.001] Sleep (dwMilliseconds=0x1) [0083.004] timeGetTime () returned 0x1f42ed3 [0083.004] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.004] timeGetTime () returned 0x1f42ed3 [0083.004] Sleep (dwMilliseconds=0x1) [0083.010] timeGetTime () returned 0x1f42ed9 [0083.010] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.010] timeGetTime () returned 0x1f42ed9 [0083.010] Sleep (dwMilliseconds=0x1) [0083.014] timeGetTime () returned 0x1f42edd [0083.014] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.014] timeGetTime () returned 0x1f42edd [0083.014] Sleep (dwMilliseconds=0x1) [0083.017] timeGetTime () returned 0x1f42ee0 [0083.017] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.017] Sleep (dwMilliseconds=0x1) [0083.020] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.020] Sleep (dwMilliseconds=0x1) [0083.065] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.065] Sleep (dwMilliseconds=0x1) [0083.072] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.073] Sleep (dwMilliseconds=0x1) [0083.075] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.075] Sleep (dwMilliseconds=0x1) [0083.090] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.090] Sleep (dwMilliseconds=0x1) [0083.111] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.111] Sleep (dwMilliseconds=0x1) [0083.124] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.124] Sleep (dwMilliseconds=0x1) [0083.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.128] Sleep (dwMilliseconds=0x1) [0083.133] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.133] Sleep (dwMilliseconds=0x1) [0083.136] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.136] Sleep (dwMilliseconds=0x1) [0083.138] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.139] Sleep (dwMilliseconds=0x1) [0083.142] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.142] Sleep (dwMilliseconds=0x1) [0083.194] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.194] Sleep (dwMilliseconds=0x1) [0083.197] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.197] Sleep (dwMilliseconds=0x1) [0083.201] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.201] Sleep (dwMilliseconds=0x1) [0083.203] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.203] Sleep (dwMilliseconds=0x1) [0083.208] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.208] Sleep (dwMilliseconds=0x1) [0083.213] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.213] Sleep (dwMilliseconds=0x1) [0083.216] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.216] Sleep (dwMilliseconds=0x1) [0083.218] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.218] Sleep (dwMilliseconds=0x1) [0083.221] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.221] Sleep (dwMilliseconds=0x1) [0083.223] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.223] Sleep (dwMilliseconds=0x1) [0083.275] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.275] Sleep (dwMilliseconds=0x1) [0083.280] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.280] Sleep (dwMilliseconds=0x1) [0083.284] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.284] Sleep (dwMilliseconds=0x1) [0083.286] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.286] Sleep (dwMilliseconds=0x1) [0083.289] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.289] Sleep (dwMilliseconds=0x1) [0083.291] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.291] Sleep (dwMilliseconds=0x1) [0083.296] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.296] Sleep (dwMilliseconds=0x1) [0083.303] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.303] Sleep (dwMilliseconds=0x1) [0083.340] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.340] Sleep (dwMilliseconds=0x1) [0083.344] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.344] Sleep (dwMilliseconds=0x1) [0083.353] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.353] Sleep (dwMilliseconds=0x1) [0083.356] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.356] Sleep (dwMilliseconds=0x1) [0083.358] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.358] Sleep (dwMilliseconds=0x1) [0083.361] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.361] Sleep (dwMilliseconds=0x1) [0083.364] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.364] Sleep (dwMilliseconds=0x1) [0083.366] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.366] Sleep (dwMilliseconds=0x1) [0083.367] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.367] Sleep (dwMilliseconds=0x1) [0083.369] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.369] Sleep (dwMilliseconds=0x1) [0083.526] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.527] Sleep (dwMilliseconds=0x1) [0083.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.543] Sleep (dwMilliseconds=0x1) [0083.549] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.549] Sleep (dwMilliseconds=0x1) [0083.556] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.556] Sleep (dwMilliseconds=0x1) [0083.560] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.560] Sleep (dwMilliseconds=0x1) [0083.563] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.563] Sleep (dwMilliseconds=0x1) [0083.565] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.565] Sleep (dwMilliseconds=0x1) [0083.567] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.567] Sleep (dwMilliseconds=0x1) [0083.570] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.570] Sleep (dwMilliseconds=0x1) [0083.597] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.597] Sleep (dwMilliseconds=0x1) [0083.602] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.602] Sleep (dwMilliseconds=0x1) [0083.605] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.605] Sleep (dwMilliseconds=0x1) [0083.608] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.608] Sleep (dwMilliseconds=0x1) [0083.612] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.613] Sleep (dwMilliseconds=0x1) [0083.627] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.627] Sleep (dwMilliseconds=0x1) [0083.630] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.630] Sleep (dwMilliseconds=0x1) [0083.631] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.632] Sleep (dwMilliseconds=0x1) [0083.634] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.634] Sleep (dwMilliseconds=0x1) [0083.637] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.637] Sleep (dwMilliseconds=0x1) [0083.640] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.640] Sleep (dwMilliseconds=0x1) [0083.642] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.642] Sleep (dwMilliseconds=0x1) [0083.722] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.722] Sleep (dwMilliseconds=0x1) [0083.726] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.726] Sleep (dwMilliseconds=0x1) [0083.728] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.728] Sleep (dwMilliseconds=0x1) [0083.732] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.732] Sleep (dwMilliseconds=0x1) [0083.734] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.735] Sleep (dwMilliseconds=0x1) [0083.737] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.737] Sleep (dwMilliseconds=0x1) [0083.740] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.740] Sleep (dwMilliseconds=0x1) [0083.742] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.743] Sleep (dwMilliseconds=0x1) [0083.744] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.744] Sleep (dwMilliseconds=0x1) [0083.748] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.748] Sleep (dwMilliseconds=0x1) [0083.750] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.750] Sleep (dwMilliseconds=0x1) [0083.751] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.752] Sleep (dwMilliseconds=0x1) [0083.795] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.795] Sleep (dwMilliseconds=0x1) [0083.798] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.798] Sleep (dwMilliseconds=0x1) [0083.801] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.801] Sleep (dwMilliseconds=0x1) [0083.806] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.806] Sleep (dwMilliseconds=0x1) [0083.807] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.807] Sleep (dwMilliseconds=0x1) [0083.810] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.810] Sleep (dwMilliseconds=0x1) [0083.844] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.844] Sleep (dwMilliseconds=0x1) [0083.847] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.847] Sleep (dwMilliseconds=0x1) [0083.850] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.850] Sleep (dwMilliseconds=0x1) [0083.855] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.855] Sleep (dwMilliseconds=0x1) [0083.857] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.857] Sleep (dwMilliseconds=0x1) [0083.862] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.862] Sleep (dwMilliseconds=0x1) [0083.864] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.864] Sleep (dwMilliseconds=0x1) [0083.867] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.867] Sleep (dwMilliseconds=0x1) [0083.869] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.869] Sleep (dwMilliseconds=0x1) [0083.871] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.871] Sleep (dwMilliseconds=0x1) [0083.873] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.873] Sleep (dwMilliseconds=0x1) [0083.876] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.876] Sleep (dwMilliseconds=0x1) [0083.910] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.910] Sleep (dwMilliseconds=0x1) [0083.913] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.913] Sleep (dwMilliseconds=0x1) [0083.916] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.917] Sleep (dwMilliseconds=0x1) [0083.919] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.919] Sleep (dwMilliseconds=0x1) [0083.922] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.922] Sleep (dwMilliseconds=0x1) [0083.926] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.926] Sleep (dwMilliseconds=0x1) [0083.928] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.928] Sleep (dwMilliseconds=0x1) [0083.933] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.933] Sleep (dwMilliseconds=0x1) [0083.935] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.935] Sleep (dwMilliseconds=0x1) [0083.939] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.939] Sleep (dwMilliseconds=0x1) [0083.941] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.941] Sleep (dwMilliseconds=0x1) [0083.944] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.945] Sleep (dwMilliseconds=0x1) [0083.946] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.946] Sleep (dwMilliseconds=0x1) [0083.948] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.948] Sleep (dwMilliseconds=0x1) [0083.976] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.976] Sleep (dwMilliseconds=0x1) [0083.980] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.980] Sleep (dwMilliseconds=0x1) [0083.984] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.984] Sleep (dwMilliseconds=0x1) [0083.987] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.987] Sleep (dwMilliseconds=0x1) [0083.990] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.990] Sleep (dwMilliseconds=0x1) [0083.992] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.992] Sleep (dwMilliseconds=0x1) [0083.995] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0083.996] Sleep (dwMilliseconds=0x1) [0084.001] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.001] Sleep (dwMilliseconds=0x1) [0084.003] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.003] Sleep (dwMilliseconds=0x1) [0084.020] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.020] Sleep (dwMilliseconds=0x1) [0084.023] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.023] Sleep (dwMilliseconds=0x1) [0084.028] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.028] Sleep (dwMilliseconds=0x1) [0084.030] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.030] Sleep (dwMilliseconds=0x1) [0084.042] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.042] Sleep (dwMilliseconds=0x1) [0084.047] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.047] Sleep (dwMilliseconds=0x1) [0084.049] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.049] Sleep (dwMilliseconds=0x1) [0084.052] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.052] Sleep (dwMilliseconds=0x1) [0084.054] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.054] Sleep (dwMilliseconds=0x1) [0084.057] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.057] Sleep (dwMilliseconds=0x1) [0084.060] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.060] Sleep (dwMilliseconds=0x1) [0084.102] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.102] Sleep (dwMilliseconds=0x1) [0084.106] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.106] Sleep (dwMilliseconds=0x1) [0084.109] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.109] Sleep (dwMilliseconds=0x1) [0084.112] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.112] Sleep (dwMilliseconds=0x1) [0084.116] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.117] Sleep (dwMilliseconds=0x1) [0084.119] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.119] Sleep (dwMilliseconds=0x1) [0084.121] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.121] Sleep (dwMilliseconds=0x1) [0084.123] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.123] Sleep (dwMilliseconds=0x1) [0084.126] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.126] Sleep (dwMilliseconds=0x1) [0084.129] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.129] Sleep (dwMilliseconds=0x1) [0084.132] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.132] Sleep (dwMilliseconds=0x1) [0084.134] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.134] Sleep (dwMilliseconds=0x1) [0084.137] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.137] Sleep (dwMilliseconds=0x1) [0084.142] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.142] Sleep (dwMilliseconds=0x1) [0084.144] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.144] Sleep (dwMilliseconds=0x1) [0084.198] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.198] Sleep (dwMilliseconds=0x1) [0084.200] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.200] Sleep (dwMilliseconds=0x1) [0084.203] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.203] Sleep (dwMilliseconds=0x1) [0084.206] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.206] Sleep (dwMilliseconds=0x1) [0084.211] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.211] Sleep (dwMilliseconds=0x1) [0084.212] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.212] Sleep (dwMilliseconds=0x1) [0084.214] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.214] Sleep (dwMilliseconds=0x1) [0084.275] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.276] Sleep (dwMilliseconds=0x1) [0084.280] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.280] Sleep (dwMilliseconds=0x1) [0084.283] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.283] Sleep (dwMilliseconds=0x1) [0084.286] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.286] Sleep (dwMilliseconds=0x1) [0084.289] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.289] Sleep (dwMilliseconds=0x1) [0084.291] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.291] Sleep (dwMilliseconds=0x1) [0084.296] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.296] Sleep (dwMilliseconds=0x1) [0084.302] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.302] Sleep (dwMilliseconds=0x1) [0084.304] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.304] Sleep (dwMilliseconds=0x1) [0084.323] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.323] Sleep (dwMilliseconds=0x1) [0084.325] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.326] Sleep (dwMilliseconds=0x1) [0084.328] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.328] Sleep (dwMilliseconds=0x1) [0084.331] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.331] Sleep (dwMilliseconds=0x1) [0084.335] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.335] Sleep (dwMilliseconds=0x1) [0084.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.338] Sleep (dwMilliseconds=0x1) [0084.341] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.341] Sleep (dwMilliseconds=0x1) [0084.344] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.344] Sleep (dwMilliseconds=0x1) [0084.347] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.347] Sleep (dwMilliseconds=0x1) [0084.349] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.349] Sleep (dwMilliseconds=0x1) [0084.352] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.352] Sleep (dwMilliseconds=0x1) [0084.386] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.386] Sleep (dwMilliseconds=0x1) [0084.389] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.390] Sleep (dwMilliseconds=0x1) [0084.393] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.393] Sleep (dwMilliseconds=0x1) [0084.397] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.397] Sleep (dwMilliseconds=0x1) [0084.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.399] Sleep (dwMilliseconds=0x1) [0084.402] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.402] Sleep (dwMilliseconds=0x1) [0084.407] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.407] Sleep (dwMilliseconds=0x1) [0084.408] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.408] Sleep (dwMilliseconds=0x1) [0084.411] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.411] Sleep (dwMilliseconds=0x1) [0084.413] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.413] Sleep (dwMilliseconds=0x1) [0084.415] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.415] Sleep (dwMilliseconds=0x1) [0084.450] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.450] Sleep (dwMilliseconds=0x1) [0084.453] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.453] Sleep (dwMilliseconds=0x1) [0084.456] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.456] Sleep (dwMilliseconds=0x1) [0084.459] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.459] Sleep (dwMilliseconds=0x1) [0084.462] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.462] Sleep (dwMilliseconds=0x1) [0084.468] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.468] Sleep (dwMilliseconds=0x1) [0084.503] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.503] Sleep (dwMilliseconds=0x1) [0084.507] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.507] Sleep (dwMilliseconds=0x1) [0084.511] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.511] Sleep (dwMilliseconds=0x1) [0084.513] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.513] Sleep (dwMilliseconds=0x1) [0084.522] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.522] Sleep (dwMilliseconds=0x1) [0084.525] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.525] Sleep (dwMilliseconds=0x1) [0084.530] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.530] Sleep (dwMilliseconds=0x1) [0084.532] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.533] Sleep (dwMilliseconds=0x1) [0084.578] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.578] Sleep (dwMilliseconds=0x1) [0084.634] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.634] Sleep (dwMilliseconds=0x1) [0084.640] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.640] Sleep (dwMilliseconds=0x1) [0084.645] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.645] Sleep (dwMilliseconds=0x1) [0084.650] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.650] Sleep (dwMilliseconds=0x1) [0084.652] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.652] Sleep (dwMilliseconds=0x1) [0084.654] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.654] Sleep (dwMilliseconds=0x1) [0084.656] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.656] Sleep (dwMilliseconds=0x1) [0084.658] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.658] Sleep (dwMilliseconds=0x1) [0084.660] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.660] Sleep (dwMilliseconds=0x1) [0084.665] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.665] Sleep (dwMilliseconds=0x1) [0084.724] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.724] Sleep (dwMilliseconds=0x1) [0084.728] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.728] Sleep (dwMilliseconds=0x1) [0084.732] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.732] Sleep (dwMilliseconds=0x1) [0084.737] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.737] Sleep (dwMilliseconds=0x1) [0084.739] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.740] Sleep (dwMilliseconds=0x1) [0084.741] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.742] Sleep (dwMilliseconds=0x1) [0084.744] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.744] Sleep (dwMilliseconds=0x1) [0084.746] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.747] Sleep (dwMilliseconds=0x1) [0084.753] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.753] Sleep (dwMilliseconds=0x1) [0084.755] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.755] Sleep (dwMilliseconds=0x1) [0084.758] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.758] Sleep (dwMilliseconds=0x1) [0084.759] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.759] Sleep (dwMilliseconds=0x1) [0084.798] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.798] Sleep (dwMilliseconds=0x1) [0084.801] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.801] Sleep (dwMilliseconds=0x1) [0084.804] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.804] Sleep (dwMilliseconds=0x1) [0084.888] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.888] Sleep (dwMilliseconds=0x1) [0084.894] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.894] Sleep (dwMilliseconds=0x1) [0084.920] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.920] Sleep (dwMilliseconds=0x1) [0084.956] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.956] Sleep (dwMilliseconds=0x1) [0084.959] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.959] Sleep (dwMilliseconds=0x1) [0084.963] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.963] Sleep (dwMilliseconds=0x1) [0084.965] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.965] Sleep (dwMilliseconds=0x1) [0084.968] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.968] Sleep (dwMilliseconds=0x1) [0084.972] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0084.972] Sleep (dwMilliseconds=0x1) [0085.039] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.039] Sleep (dwMilliseconds=0x1) [0085.074] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.074] Sleep (dwMilliseconds=0x1) [0085.078] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.078] Sleep (dwMilliseconds=0x1) [0085.098] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.098] Sleep (dwMilliseconds=0x1) [0085.102] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.102] Sleep (dwMilliseconds=0x1) [0085.104] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.104] Sleep (dwMilliseconds=0x1) [0085.107] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.107] Sleep (dwMilliseconds=0x1) [0085.109] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.109] Sleep (dwMilliseconds=0x1) [0085.112] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.112] Sleep (dwMilliseconds=0x1) [0085.114] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.114] Sleep (dwMilliseconds=0x1) [0085.116] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.116] Sleep (dwMilliseconds=0x1) [0085.120] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.120] Sleep (dwMilliseconds=0x1) [0085.122] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.122] Sleep (dwMilliseconds=0x1) [0085.144] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.144] Sleep (dwMilliseconds=0x1) [0085.156] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.156] Sleep (dwMilliseconds=0x1) [0085.165] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.165] Sleep (dwMilliseconds=0x1) [0085.191] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.191] Sleep (dwMilliseconds=0x1) [0085.193] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.193] Sleep (dwMilliseconds=0x1) [0085.195] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.195] Sleep (dwMilliseconds=0x1) [0085.198] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.198] Sleep (dwMilliseconds=0x1) [0085.202] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.202] Sleep (dwMilliseconds=0x1) [0085.210] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.210] Sleep (dwMilliseconds=0x1) [0085.272] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.272] Sleep (dwMilliseconds=0x1) [0085.276] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.276] Sleep (dwMilliseconds=0x1) [0085.283] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.283] Sleep (dwMilliseconds=0x1) [0085.292] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.292] Sleep (dwMilliseconds=0x1) [0085.337] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.337] Sleep (dwMilliseconds=0x1) [0085.345] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.345] Sleep (dwMilliseconds=0x1) [0085.348] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.348] Sleep (dwMilliseconds=0x1) [0085.352] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.352] Sleep (dwMilliseconds=0x1) [0085.358] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.358] Sleep (dwMilliseconds=0x1) [0085.360] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.360] Sleep (dwMilliseconds=0x1) [0085.363] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.363] Sleep (dwMilliseconds=0x1) [0085.373] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.373] Sleep (dwMilliseconds=0x1) [0085.397] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.397] Sleep (dwMilliseconds=0x1) [0085.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.399] Sleep (dwMilliseconds=0x1) [0085.402] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.402] Sleep (dwMilliseconds=0x1) [0085.406] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.406] Sleep (dwMilliseconds=0x1) [0085.408] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.408] Sleep (dwMilliseconds=0x1) [0085.410] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.410] Sleep (dwMilliseconds=0x1) [0085.412] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.412] Sleep (dwMilliseconds=0x1) [0085.414] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.414] Sleep (dwMilliseconds=0x1) [0085.423] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.423] Sleep (dwMilliseconds=0x1) [0085.458] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.458] Sleep (dwMilliseconds=0x1) [0085.463] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.463] Sleep (dwMilliseconds=0x1) [0085.465] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.465] Sleep (dwMilliseconds=0x1) [0085.469] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.469] Sleep (dwMilliseconds=0x1) [0085.471] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.471] Sleep (dwMilliseconds=0x1) [0085.473] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.473] Sleep (dwMilliseconds=0x1) [0085.476] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.476] Sleep (dwMilliseconds=0x1) [0085.480] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.480] Sleep (dwMilliseconds=0x1) [0085.482] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.482] Sleep (dwMilliseconds=0x1) [0085.500] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.500] Sleep (dwMilliseconds=0x1) [0085.504] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.504] Sleep (dwMilliseconds=0x1) [0085.506] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.506] Sleep (dwMilliseconds=0x1) [0085.508] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.508] Sleep (dwMilliseconds=0x1) [0085.510] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.510] Sleep (dwMilliseconds=0x1) [0085.514] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.514] Sleep (dwMilliseconds=0x1) [0085.518] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.518] Sleep (dwMilliseconds=0x1) [0085.550] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.550] Sleep (dwMilliseconds=0x1) [0085.553] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.553] Sleep (dwMilliseconds=0x1) [0085.557] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.557] Sleep (dwMilliseconds=0x1) [0085.560] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.561] Sleep (dwMilliseconds=0x1) [0085.563] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.563] Sleep (dwMilliseconds=0x1) [0085.567] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.567] Sleep (dwMilliseconds=0x1) [0085.570] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.570] Sleep (dwMilliseconds=0x1) [0085.589] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.589] Sleep (dwMilliseconds=0x1) [0085.592] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.592] Sleep (dwMilliseconds=0x1) [0085.600] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.600] Sleep (dwMilliseconds=0x1) [0085.602] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.602] Sleep (dwMilliseconds=0x1) [0085.606] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.606] Sleep (dwMilliseconds=0x1) [0085.608] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.608] Sleep (dwMilliseconds=0x1) [0085.611] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.611] Sleep (dwMilliseconds=0x1) [0085.613] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.613] Sleep (dwMilliseconds=0x1) [0085.651] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.651] Sleep (dwMilliseconds=0x1) [0085.653] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.653] Sleep (dwMilliseconds=0x1) [0085.661] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.661] Sleep (dwMilliseconds=0x1) [0085.666] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.666] Sleep (dwMilliseconds=0x1) [0085.669] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.669] Sleep (dwMilliseconds=0x1) [0085.673] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.673] Sleep (dwMilliseconds=0x1) [0085.674] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.674] Sleep (dwMilliseconds=0x1) [0085.677] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.677] Sleep (dwMilliseconds=0x1) [0085.679] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.679] Sleep (dwMilliseconds=0x1) [0085.712] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.712] Sleep (dwMilliseconds=0x1) [0085.716] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.716] Sleep (dwMilliseconds=0x1) [0085.719] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.719] Sleep (dwMilliseconds=0x1) [0085.723] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.723] Sleep (dwMilliseconds=0x1) [0085.726] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.726] Sleep (dwMilliseconds=0x1) [0085.728] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.728] Sleep (dwMilliseconds=0x1) [0085.729] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.729] Sleep (dwMilliseconds=0x1) [0085.732] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.732] Sleep (dwMilliseconds=0x1) [0085.734] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.734] Sleep (dwMilliseconds=0x1) [0085.740] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.740] Sleep (dwMilliseconds=0x1) [0085.743] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.743] Sleep (dwMilliseconds=0x1) [0085.744] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.744] Sleep (dwMilliseconds=0x1) [0085.747] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.747] Sleep (dwMilliseconds=0x1) [0085.750] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.750] Sleep (dwMilliseconds=0x1) [0085.751] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.752] Sleep (dwMilliseconds=0x1) [0085.890] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.890] Sleep (dwMilliseconds=0x1) [0085.896] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.896] Sleep (dwMilliseconds=0x1) [0085.898] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.898] Sleep (dwMilliseconds=0x1) [0085.903] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.903] Sleep (dwMilliseconds=0x1) [0085.911] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.911] Sleep (dwMilliseconds=0x1) [0085.913] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.913] Sleep (dwMilliseconds=0x1) [0085.919] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.919] Sleep (dwMilliseconds=0x1) [0085.921] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.921] Sleep (dwMilliseconds=0x1) [0085.924] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.924] Sleep (dwMilliseconds=0x1) [0085.966] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.967] Sleep (dwMilliseconds=0x1) [0085.969] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.970] Sleep (dwMilliseconds=0x1) [0085.973] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.973] Sleep (dwMilliseconds=0x1) [0085.979] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.979] Sleep (dwMilliseconds=0x1) [0085.982] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.982] Sleep (dwMilliseconds=0x1) [0085.984] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.985] Sleep (dwMilliseconds=0x1) [0085.987] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.987] Sleep (dwMilliseconds=0x1) [0085.991] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.991] Sleep (dwMilliseconds=0x1) [0085.994] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0085.994] Sleep (dwMilliseconds=0x1) [0086.042] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.042] Sleep (dwMilliseconds=0x1) [0086.045] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.045] Sleep (dwMilliseconds=0x1) [0086.048] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.048] Sleep (dwMilliseconds=0x1) [0086.057] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.057] Sleep (dwMilliseconds=0x1) [0086.062] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.062] Sleep (dwMilliseconds=0x1) [0086.104] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.104] Sleep (dwMilliseconds=0x1) [0086.108] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.108] Sleep (dwMilliseconds=0x1) [0086.109] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.109] Sleep (dwMilliseconds=0x1) [0086.112] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.112] Sleep (dwMilliseconds=0x1) [0086.115] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.115] Sleep (dwMilliseconds=0x1) [0086.118] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.118] Sleep (dwMilliseconds=0x1) [0086.120] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.120] Sleep (dwMilliseconds=0x1) [0086.124] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.124] Sleep (dwMilliseconds=0x1) [0086.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.128] Sleep (dwMilliseconds=0x1) [0086.130] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.130] Sleep (dwMilliseconds=0x1) [0086.133] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.133] Sleep (dwMilliseconds=0x1) [0086.202] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.202] Sleep (dwMilliseconds=0x1) [0086.209] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.209] Sleep (dwMilliseconds=0x1) [0086.212] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.212] Sleep (dwMilliseconds=0x1) [0086.215] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.215] Sleep (dwMilliseconds=0x1) [0086.217] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.217] Sleep (dwMilliseconds=0x1) [0086.220] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.220] Sleep (dwMilliseconds=0x1) [0086.222] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.222] Sleep (dwMilliseconds=0x1) [0086.281] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.281] Sleep (dwMilliseconds=0x1) [0086.287] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.287] Sleep (dwMilliseconds=0x1) [0086.289] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.289] Sleep (dwMilliseconds=0x1) [0086.294] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.295] Sleep (dwMilliseconds=0x1) [0086.298] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.298] Sleep (dwMilliseconds=0x1) [0086.303] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.303] Sleep (dwMilliseconds=0x1) [0086.308] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.308] Sleep (dwMilliseconds=0x1) [0086.321] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.321] Sleep (dwMilliseconds=0x1) [0086.324] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.324] Sleep (dwMilliseconds=0x1) [0086.373] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.373] Sleep (dwMilliseconds=0x1) [0086.382] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.382] Sleep (dwMilliseconds=0x1) [0086.385] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.385] Sleep (dwMilliseconds=0x1) [0086.389] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.389] Sleep (dwMilliseconds=0x1) [0086.392] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.392] Sleep (dwMilliseconds=0x1) [0086.395] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.395] Sleep (dwMilliseconds=0x1) [0086.400] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.400] Sleep (dwMilliseconds=0x1) [0086.402] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.402] Sleep (dwMilliseconds=0x1) [0086.405] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.405] Sleep (dwMilliseconds=0x1) [0086.408] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.408] Sleep (dwMilliseconds=0x1) [0086.411] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.411] Sleep (dwMilliseconds=0x1) [0086.413] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.413] Sleep (dwMilliseconds=0x1) [0086.454] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.455] Sleep (dwMilliseconds=0x1) [0086.458] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.458] Sleep (dwMilliseconds=0x1) [0086.460] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.460] Sleep (dwMilliseconds=0x1) [0086.463] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.463] Sleep (dwMilliseconds=0x1) [0086.466] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.466] Sleep (dwMilliseconds=0x1) [0086.468] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.468] Sleep (dwMilliseconds=0x1) [0086.471] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.471] Sleep (dwMilliseconds=0x1) [0086.473] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.473] Sleep (dwMilliseconds=0x1) [0086.477] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.477] Sleep (dwMilliseconds=0x1) [0086.483] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.483] Sleep (dwMilliseconds=0x1) [0086.486] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.486] Sleep (dwMilliseconds=0x1) [0086.488] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.488] Sleep (dwMilliseconds=0x1) [0086.522] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.522] Sleep (dwMilliseconds=0x1) [0086.525] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.525] Sleep (dwMilliseconds=0x1) [0086.527] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.527] Sleep (dwMilliseconds=0x1) [0086.532] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.532] Sleep (dwMilliseconds=0x1) [0086.535] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.535] Sleep (dwMilliseconds=0x1) [0086.536] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.536] Sleep (dwMilliseconds=0x1) [0086.538] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.538] Sleep (dwMilliseconds=0x1) [0086.542] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.542] Sleep (dwMilliseconds=0x1) [0086.545] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.545] Sleep (dwMilliseconds=0x1) [0086.547] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.547] Sleep (dwMilliseconds=0x1) [0086.549] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.549] Sleep (dwMilliseconds=0x1) [0086.590] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.590] Sleep (dwMilliseconds=0x1) [0086.594] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.594] Sleep (dwMilliseconds=0x1) [0086.597] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.597] Sleep (dwMilliseconds=0x1) [0086.598] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.598] Sleep (dwMilliseconds=0x1) [0086.601] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.601] Sleep (dwMilliseconds=0x1) [0086.606] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.606] Sleep (dwMilliseconds=0x1) [0086.655] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.655] Sleep (dwMilliseconds=0x1) [0086.657] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.657] Sleep (dwMilliseconds=0x1) [0086.659] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.660] Sleep (dwMilliseconds=0x1) [0086.663] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.663] Sleep (dwMilliseconds=0x1) [0086.669] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.669] Sleep (dwMilliseconds=0x1) [0086.671] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.672] Sleep (dwMilliseconds=0x1) [0086.673] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.673] Sleep (dwMilliseconds=0x1) [0086.677] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.677] Sleep (dwMilliseconds=0x1) [0086.685] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.685] Sleep (dwMilliseconds=0x1) [0086.689] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.689] Sleep (dwMilliseconds=0x1) [0086.691] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.691] Sleep (dwMilliseconds=0x1) [0086.695] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.695] Sleep (dwMilliseconds=0x1) [0086.698] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.698] Sleep (dwMilliseconds=0x1) [0086.702] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.702] Sleep (dwMilliseconds=0x1) [0086.751] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.751] Sleep (dwMilliseconds=0x1) [0086.754] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.754] Sleep (dwMilliseconds=0x1) [0086.757] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.757] Sleep (dwMilliseconds=0x1) [0086.760] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.760] Sleep (dwMilliseconds=0x1) [0086.765] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.765] Sleep (dwMilliseconds=0x1) [0086.768] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.768] Sleep (dwMilliseconds=0x1) [0086.770] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.771] Sleep (dwMilliseconds=0x1) [0086.773] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.773] Sleep (dwMilliseconds=0x1) [0086.783] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.783] Sleep (dwMilliseconds=0x1) [0086.786] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.786] Sleep (dwMilliseconds=0x1) [0086.789] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.789] Sleep (dwMilliseconds=0x1) [0086.791] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.791] Sleep (dwMilliseconds=0x1) [0086.794] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.794] Sleep (dwMilliseconds=0x1) [0086.797] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.797] Sleep (dwMilliseconds=0x1) [0086.843] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.843] Sleep (dwMilliseconds=0x1) [0086.849] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.849] Sleep (dwMilliseconds=0x1) [0086.852] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.852] Sleep (dwMilliseconds=0x1) [0086.858] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.858] Sleep (dwMilliseconds=0x1) [0086.860] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.860] Sleep (dwMilliseconds=0x1) [0086.862] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.863] Sleep (dwMilliseconds=0x1) [0086.876] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.876] Sleep (dwMilliseconds=0x1) [0086.880] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.880] Sleep (dwMilliseconds=0x1) [0086.883] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.883] Sleep (dwMilliseconds=0x1) [0086.886] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.886] Sleep (dwMilliseconds=0x1) [0086.887] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.887] Sleep (dwMilliseconds=0x1) [0086.890] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.890] Sleep (dwMilliseconds=0x1) [0086.958] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.958] Sleep (dwMilliseconds=0x1) [0086.963] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.963] Sleep (dwMilliseconds=0x1) [0086.966] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.966] Sleep (dwMilliseconds=0x1) [0086.971] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.972] Sleep (dwMilliseconds=0x1) [0086.974] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.974] Sleep (dwMilliseconds=0x1) [0086.998] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0086.998] Sleep (dwMilliseconds=0x1) [0087.032] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.032] Sleep (dwMilliseconds=0x1) [0087.037] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.037] Sleep (dwMilliseconds=0x1) [0087.044] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.044] Sleep (dwMilliseconds=0x1) [0087.048] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.048] Sleep (dwMilliseconds=0x1) [0087.051] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.051] Sleep (dwMilliseconds=0x1) [0087.060] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.060] Sleep (dwMilliseconds=0x1) [0087.063] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.063] Sleep (dwMilliseconds=0x1) [0087.066] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.066] Sleep (dwMilliseconds=0x1) [0087.072] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.072] Sleep (dwMilliseconds=0x1) [0087.112] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.112] Sleep (dwMilliseconds=0x1) [0087.116] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.116] Sleep (dwMilliseconds=0x1) [0087.120] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.120] Sleep (dwMilliseconds=0x1) [0087.125] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.125] Sleep (dwMilliseconds=0x1) [0087.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.128] Sleep (dwMilliseconds=0x1) [0087.141] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.141] Sleep (dwMilliseconds=0x1) [0087.147] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.147] Sleep (dwMilliseconds=0x1) [0087.208] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.208] Sleep (dwMilliseconds=0x1) [0087.211] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.211] Sleep (dwMilliseconds=0x1) [0087.214] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.215] Sleep (dwMilliseconds=0x1) [0087.217] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.217] Sleep (dwMilliseconds=0x1) [0087.220] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.220] Sleep (dwMilliseconds=0x1) [0087.223] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.223] Sleep (dwMilliseconds=0x1) [0087.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.226] Sleep (dwMilliseconds=0x1) [0087.322] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.322] Sleep (dwMilliseconds=0x1) [0087.325] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.325] Sleep (dwMilliseconds=0x1) [0087.330] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.330] Sleep (dwMilliseconds=0x1) [0087.334] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.334] Sleep (dwMilliseconds=0x1) [0087.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.338] Sleep (dwMilliseconds=0x1) [0087.341] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.341] Sleep (dwMilliseconds=0x1) [0087.349] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.349] Sleep (dwMilliseconds=0x1) [0087.381] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.381] Sleep (dwMilliseconds=0x1) [0087.385] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.385] Sleep (dwMilliseconds=0x1) [0087.390] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.390] Sleep (dwMilliseconds=0x1) [0087.397] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.397] Sleep (dwMilliseconds=0x1) [0087.426] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.426] Sleep (dwMilliseconds=0x1) [0087.452] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.452] Sleep (dwMilliseconds=0x1) [0087.454] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.454] Sleep (dwMilliseconds=0x1) [0087.457] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.457] Sleep (dwMilliseconds=0x1) [0087.462] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.462] Sleep (dwMilliseconds=0x1) [0087.466] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.466] Sleep (dwMilliseconds=0x1) [0087.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.470] Sleep (dwMilliseconds=0x1) [0087.472] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.472] Sleep (dwMilliseconds=0x1) [0087.477] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.477] Sleep (dwMilliseconds=0x1) [0087.518] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.518] Sleep (dwMilliseconds=0x1) [0087.522] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.522] Sleep (dwMilliseconds=0x1) [0087.527] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.527] Sleep (dwMilliseconds=0x1) [0087.530] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.530] Sleep (dwMilliseconds=0x1) [0087.534] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.534] Sleep (dwMilliseconds=0x1) [0087.537] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.537] Sleep (dwMilliseconds=0x1) [0087.541] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.541] Sleep (dwMilliseconds=0x1) [0087.545] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.545] Sleep (dwMilliseconds=0x1) [0087.546] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.546] Sleep (dwMilliseconds=0x1) [0087.549] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.549] Sleep (dwMilliseconds=0x1) [0087.551] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.551] Sleep (dwMilliseconds=0x1) [0087.556] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.556] Sleep (dwMilliseconds=0x1) [0087.558] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.558] Sleep (dwMilliseconds=0x1) [0087.607] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.607] Sleep (dwMilliseconds=0x1) [0087.611] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.611] Sleep (dwMilliseconds=0x1) [0087.614] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.615] Sleep (dwMilliseconds=0x1) [0087.619] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.619] Sleep (dwMilliseconds=0x1) [0087.622] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.622] Sleep (dwMilliseconds=0x1) [0087.627] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.627] Sleep (dwMilliseconds=0x1) [0087.633] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.633] Sleep (dwMilliseconds=0x1) [0087.637] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.637] Sleep (dwMilliseconds=0x1) [0087.638] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.638] Sleep (dwMilliseconds=0x1) [0087.640] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.640] Sleep (dwMilliseconds=0x1) [0087.642] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.642] Sleep (dwMilliseconds=0x1) [0087.645] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.645] Sleep (dwMilliseconds=0x1) [0087.649] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.649] Sleep (dwMilliseconds=0x1) [0087.691] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.691] Sleep (dwMilliseconds=0x1) [0087.697] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.697] Sleep (dwMilliseconds=0x1) [0087.700] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.700] Sleep (dwMilliseconds=0x1) [0087.704] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.704] Sleep (dwMilliseconds=0x1) [0087.708] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.708] Sleep (dwMilliseconds=0x1) [0087.709] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.710] Sleep (dwMilliseconds=0x1) [0087.711] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.711] Sleep (dwMilliseconds=0x1) [0087.714] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.714] Sleep (dwMilliseconds=0x1) [0087.717] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.717] Sleep (dwMilliseconds=0x1) [0087.720] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.720] Sleep (dwMilliseconds=0x1) [0087.722] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.722] Sleep (dwMilliseconds=0x1) [0087.725] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.725] Sleep (dwMilliseconds=0x1) [0087.727] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.727] Sleep (dwMilliseconds=0x1) [0087.771] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.771] Sleep (dwMilliseconds=0x1) [0087.774] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.774] Sleep (dwMilliseconds=0x1) [0087.777] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.777] Sleep (dwMilliseconds=0x1) [0087.781] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.781] Sleep (dwMilliseconds=0x1) [0087.782] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.783] Sleep (dwMilliseconds=0x1) [0087.786] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.786] Sleep (dwMilliseconds=0x1) [0087.834] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.834] Sleep (dwMilliseconds=0x1) [0087.837] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.837] Sleep (dwMilliseconds=0x1) [0087.840] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.840] Sleep (dwMilliseconds=0x1) [0087.844] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.844] Sleep (dwMilliseconds=0x1) [0087.847] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.847] Sleep (dwMilliseconds=0x1) [0087.850] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.850] Sleep (dwMilliseconds=0x1) [0087.853] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.853] Sleep (dwMilliseconds=0x1) [0087.856] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.856] Sleep (dwMilliseconds=0x1) [0087.858] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.858] Sleep (dwMilliseconds=0x1) [0087.860] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.860] Sleep (dwMilliseconds=0x1) [0087.903] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.903] Sleep (dwMilliseconds=0x1) [0087.905] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.906] Sleep (dwMilliseconds=0x1) [0087.909] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.909] Sleep (dwMilliseconds=0x1) [0087.913] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.913] Sleep (dwMilliseconds=0x1) [0087.917] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.917] Sleep (dwMilliseconds=0x1) [0087.920] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.920] Sleep (dwMilliseconds=0x1) [0087.923] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.923] Sleep (dwMilliseconds=0x1) [0087.925] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.925] Sleep (dwMilliseconds=0x1) [0087.928] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.928] Sleep (dwMilliseconds=0x1) [0087.929] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.929] Sleep (dwMilliseconds=0x1) [0087.931] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.931] Sleep (dwMilliseconds=0x1) [0087.934] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.934] Sleep (dwMilliseconds=0x1) [0087.937] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.937] Sleep (dwMilliseconds=0x1) [0087.966] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.966] Sleep (dwMilliseconds=0x1) [0087.969] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.969] Sleep (dwMilliseconds=0x1) [0087.972] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.972] Sleep (dwMilliseconds=0x1) [0087.977] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.977] Sleep (dwMilliseconds=0x1) [0087.981] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0087.981] Sleep (dwMilliseconds=0x1) [0088.022] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.022] Sleep (dwMilliseconds=0x1) [0088.024] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.025] Sleep (dwMilliseconds=0x1) [0088.030] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.030] Sleep (dwMilliseconds=0x1) [0088.033] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.033] Sleep (dwMilliseconds=0x1) [0088.035] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.035] Sleep (dwMilliseconds=0x1) [0088.038] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.038] Sleep (dwMilliseconds=0x1) [0088.041] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.041] Sleep (dwMilliseconds=0x1) [0088.047] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.047] Sleep (dwMilliseconds=0x1) [0088.071] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.071] Sleep (dwMilliseconds=0x1) [0088.074] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.074] Sleep (dwMilliseconds=0x1) [0088.077] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.077] Sleep (dwMilliseconds=0x1) [0088.079] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.079] Sleep (dwMilliseconds=0x1) [0088.082] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.082] Sleep (dwMilliseconds=0x1) [0088.089] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.089] Sleep (dwMilliseconds=0x1) [0088.091] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.091] Sleep (dwMilliseconds=0x1) [0088.094] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.094] Sleep (dwMilliseconds=0x1) [0088.097] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.097] Sleep (dwMilliseconds=0x1) [0088.132] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.132] Sleep (dwMilliseconds=0x1) [0088.135] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.135] Sleep (dwMilliseconds=0x1) [0088.137] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.137] Sleep (dwMilliseconds=0x1) [0088.190] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.190] Sleep (dwMilliseconds=0x1) [0088.193] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.193] Sleep (dwMilliseconds=0x1) [0088.194] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.194] Sleep (dwMilliseconds=0x1) [0088.197] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.197] Sleep (dwMilliseconds=0x1) [0088.199] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.199] Sleep (dwMilliseconds=0x1) [0088.202] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.202] Sleep (dwMilliseconds=0x1) [0088.204] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.204] Sleep (dwMilliseconds=0x1) [0088.208] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.208] Sleep (dwMilliseconds=0x1) [0088.210] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.210] Sleep (dwMilliseconds=0x1) [0088.239] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.239] Sleep (dwMilliseconds=0x1) [0088.242] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.242] Sleep (dwMilliseconds=0x1) [0088.246] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.246] Sleep (dwMilliseconds=0x1) [0088.248] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.248] Sleep (dwMilliseconds=0x1) [0088.250] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.250] Sleep (dwMilliseconds=0x1) [0088.275] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.275] Sleep (dwMilliseconds=0x1) [0088.280] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.280] Sleep (dwMilliseconds=0x1) [0088.282] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.282] Sleep (dwMilliseconds=0x1) [0088.286] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.287] Sleep (dwMilliseconds=0x1) [0088.330] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.330] Sleep (dwMilliseconds=0x1) [0088.336] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.336] Sleep (dwMilliseconds=0x1) [0088.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.339] Sleep (dwMilliseconds=0x1) [0088.341] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.341] Sleep (dwMilliseconds=0x1) [0088.345] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.345] Sleep (dwMilliseconds=0x1) [0088.347] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.348] Sleep (dwMilliseconds=0x1) [0088.373] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.373] Sleep (dwMilliseconds=0x1) [0088.377] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.377] Sleep (dwMilliseconds=0x1) [0088.383] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.383] Sleep (dwMilliseconds=0x1) [0088.386] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.386] Sleep (dwMilliseconds=0x1) [0088.400] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.400] Sleep (dwMilliseconds=0x1) [0088.430] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.430] Sleep (dwMilliseconds=0x1) [0088.435] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.435] Sleep (dwMilliseconds=0x1) [0088.440] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.440] Sleep (dwMilliseconds=0x1) [0088.445] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.445] Sleep (dwMilliseconds=0x1) [0088.447] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.447] Sleep (dwMilliseconds=0x1) [0088.449] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.449] Sleep (dwMilliseconds=0x1) [0088.452] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.452] Sleep (dwMilliseconds=0x1) [0088.454] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.454] Sleep (dwMilliseconds=0x1) [0088.460] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.461] Sleep (dwMilliseconds=0x1) [0088.464] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.464] Sleep (dwMilliseconds=0x1) [0088.509] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.509] Sleep (dwMilliseconds=0x1) [0088.513] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.514] Sleep (dwMilliseconds=0x1) [0088.516] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.516] Sleep (dwMilliseconds=0x1) [0088.521] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.521] Sleep (dwMilliseconds=0x1) [0088.524] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.524] Sleep (dwMilliseconds=0x1) [0088.526] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.526] Sleep (dwMilliseconds=0x1) [0088.530] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.530] Sleep (dwMilliseconds=0x1) [0088.533] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.533] Sleep (dwMilliseconds=0x1) [0088.536] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.536] Sleep (dwMilliseconds=0x1) [0088.539] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.539] Sleep (dwMilliseconds=0x1) [0088.541] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.541] Sleep (dwMilliseconds=0x1) [0088.546] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.546] Sleep (dwMilliseconds=0x1) [0088.548] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.548] Sleep (dwMilliseconds=0x1) [0088.550] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.550] Sleep (dwMilliseconds=0x1) [0088.553] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.553] Sleep (dwMilliseconds=0x1) [0088.571] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.571] Sleep (dwMilliseconds=0x1) [0088.575] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.575] Sleep (dwMilliseconds=0x1) [0088.579] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.579] Sleep (dwMilliseconds=0x1) [0088.582] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.582] Sleep (dwMilliseconds=0x1) [0088.586] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.586] Sleep (dwMilliseconds=0x1) [0088.590] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.590] Sleep (dwMilliseconds=0x1) [0088.595] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.595] Sleep (dwMilliseconds=0x1) [0088.597] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.597] Sleep (dwMilliseconds=0x1) [0088.600] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.600] Sleep (dwMilliseconds=0x1) [0088.602] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.602] Sleep (dwMilliseconds=0x1) [0088.604] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.604] Sleep (dwMilliseconds=0x1) [0088.644] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.649] Sleep (dwMilliseconds=0x1) [0088.652] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.652] Sleep (dwMilliseconds=0x1) [0088.655] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.655] Sleep (dwMilliseconds=0x1) [0088.658] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.658] Sleep (dwMilliseconds=0x1) [0088.661] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.661] Sleep (dwMilliseconds=0x1) [0088.663] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.663] Sleep (dwMilliseconds=0x1) [0088.669] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.669] Sleep (dwMilliseconds=0x1) [0088.673] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.673] Sleep (dwMilliseconds=0x1) [0088.676] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.676] Sleep (dwMilliseconds=0x1) [0088.678] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.678] Sleep (dwMilliseconds=0x1) [0088.680] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.680] Sleep (dwMilliseconds=0x1) [0088.736] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.737] Sleep (dwMilliseconds=0x1) [0088.740] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.740] Sleep (dwMilliseconds=0x1) [0088.749] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.749] Sleep (dwMilliseconds=0x1) [0088.751] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.751] Sleep (dwMilliseconds=0x1) [0088.755] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.755] Sleep (dwMilliseconds=0x1) [0088.758] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.758] Sleep (dwMilliseconds=0x1) [0088.761] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.761] Sleep (dwMilliseconds=0x1) [0088.763] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.763] Sleep (dwMilliseconds=0x1) [0088.768] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.768] Sleep (dwMilliseconds=0x1) [0088.770] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.770] Sleep (dwMilliseconds=0x1) [0088.813] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.813] Sleep (dwMilliseconds=0x1) [0088.816] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.816] Sleep (dwMilliseconds=0x1) [0088.819] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.819] Sleep (dwMilliseconds=0x1) [0088.822] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.822] Sleep (dwMilliseconds=0x1) [0088.824] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.824] Sleep (dwMilliseconds=0x1) [0088.827] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.827] Sleep (dwMilliseconds=0x1) [0088.836] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.836] Sleep (dwMilliseconds=0x1) [0088.839] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.839] Sleep (dwMilliseconds=0x1) [0088.842] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.842] Sleep (dwMilliseconds=0x1) [0088.845] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.845] Sleep (dwMilliseconds=0x1) [0088.847] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.847] Sleep (dwMilliseconds=0x1) [0088.890] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.890] Sleep (dwMilliseconds=0x1) [0088.894] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.894] Sleep (dwMilliseconds=0x1) [0088.899] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.899] Sleep (dwMilliseconds=0x1) [0088.904] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.904] Sleep (dwMilliseconds=0x1) [0088.910] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.910] Sleep (dwMilliseconds=0x1) [0088.914] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.914] Sleep (dwMilliseconds=0x1) [0088.917] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.917] Sleep (dwMilliseconds=0x1) [0088.922] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.922] Sleep (dwMilliseconds=0x1) [0088.924] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.924] Sleep (dwMilliseconds=0x1) [0088.926] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.926] Sleep (dwMilliseconds=0x1) [0088.981] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.981] Sleep (dwMilliseconds=0x1) [0088.984] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.984] Sleep (dwMilliseconds=0x1) [0088.989] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.989] Sleep (dwMilliseconds=0x1) [0088.992] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.992] Sleep (dwMilliseconds=0x1) [0088.995] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.995] Sleep (dwMilliseconds=0x1) [0088.999] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0088.999] Sleep (dwMilliseconds=0x1) [0089.001] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.001] Sleep (dwMilliseconds=0x1) [0089.003] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.003] Sleep (dwMilliseconds=0x1) [0089.005] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.005] Sleep (dwMilliseconds=0x1) [0089.009] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.009] Sleep (dwMilliseconds=0x1) [0089.012] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.012] Sleep (dwMilliseconds=0x1) [0089.016] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.016] Sleep (dwMilliseconds=0x1) [0089.019] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.019] Sleep (dwMilliseconds=0x1) [0089.021] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.021] Sleep (dwMilliseconds=0x1) [0089.023] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.023] Sleep (dwMilliseconds=0x1) [0089.071] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.071] Sleep (dwMilliseconds=0x1) [0089.073] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.073] Sleep (dwMilliseconds=0x1) [0089.076] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.076] Sleep (dwMilliseconds=0x1) [0089.079] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.079] Sleep (dwMilliseconds=0x1) [0089.082] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.082] Sleep (dwMilliseconds=0x1) [0089.085] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.085] Sleep (dwMilliseconds=0x1) [0089.087] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.087] Sleep (dwMilliseconds=0x1) [0089.089] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.089] Sleep (dwMilliseconds=0x1) [0089.092] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.092] Sleep (dwMilliseconds=0x1) [0089.098] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.098] Sleep (dwMilliseconds=0x1) [0089.100] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.100] Sleep (dwMilliseconds=0x1) [0089.102] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.102] Sleep (dwMilliseconds=0x1) [0089.104] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.104] Sleep (dwMilliseconds=0x1) [0089.158] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.158] Sleep (dwMilliseconds=0x1) [0089.162] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.162] Sleep (dwMilliseconds=0x1) [0089.166] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.166] Sleep (dwMilliseconds=0x1) [0089.170] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.170] Sleep (dwMilliseconds=0x1) [0089.173] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.173] Sleep (dwMilliseconds=0x1) [0089.176] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.176] Sleep (dwMilliseconds=0x1) [0089.183] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.183] Sleep (dwMilliseconds=0x1) [0089.220] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.220] Sleep (dwMilliseconds=0x1) [0089.222] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.222] Sleep (dwMilliseconds=0x1) [0089.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.226] Sleep (dwMilliseconds=0x1) [0089.228] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.228] Sleep (dwMilliseconds=0x1) [0089.232] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.232] Sleep (dwMilliseconds=0x1) [0089.234] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.234] Sleep (dwMilliseconds=0x1) [0089.240] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.240] Sleep (dwMilliseconds=0x1) [0089.243] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.243] Sleep (dwMilliseconds=0x1) [0089.245] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.245] Sleep (dwMilliseconds=0x1) [0089.247] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.248] Sleep (dwMilliseconds=0x1) [0089.250] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.250] Sleep (dwMilliseconds=0x1) [0089.266] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.266] Sleep (dwMilliseconds=0x1) [0089.320] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.320] Sleep (dwMilliseconds=0x1) [0089.324] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.324] Sleep (dwMilliseconds=0x1) [0089.328] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.328] Sleep (dwMilliseconds=0x1) [0089.452] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.452] Sleep (dwMilliseconds=0x1) [0089.455] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.455] Sleep (dwMilliseconds=0x1) [0089.458] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.458] Sleep (dwMilliseconds=0x1) [0089.461] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.461] Sleep (dwMilliseconds=0x1) [0089.463] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.463] Sleep (dwMilliseconds=0x1) [0089.465] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.466] Sleep (dwMilliseconds=0x1) [0089.468] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.468] Sleep (dwMilliseconds=0x1) [0089.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.470] Sleep (dwMilliseconds=0x1) [0089.484] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.484] Sleep (dwMilliseconds=0x1) [0089.513] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.513] Sleep (dwMilliseconds=0x1) [0089.516] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.516] Sleep (dwMilliseconds=0x1) [0089.518] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.518] Sleep (dwMilliseconds=0x1) [0089.523] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.523] Sleep (dwMilliseconds=0x1) [0089.527] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.527] Sleep (dwMilliseconds=0x1) [0089.534] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.534] Sleep (dwMilliseconds=0x1) [0089.537] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.537] Sleep (dwMilliseconds=0x1) [0089.540] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.540] Sleep (dwMilliseconds=0x1) [0089.574] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.574] Sleep (dwMilliseconds=0x1) [0089.577] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.577] Sleep (dwMilliseconds=0x1) [0089.580] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.580] Sleep (dwMilliseconds=0x1) [0089.582] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.583] Sleep (dwMilliseconds=0x1) [0089.585] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.585] Sleep (dwMilliseconds=0x1) [0089.590] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.591] Sleep (dwMilliseconds=0x1) [0089.597] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.597] Sleep (dwMilliseconds=0x1) [0089.600] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.600] Sleep (dwMilliseconds=0x1) [0089.602] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.602] Sleep (dwMilliseconds=0x1) [0089.647] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.648] Sleep (dwMilliseconds=0x1) [0089.652] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.652] Sleep (dwMilliseconds=0x1) [0089.654] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.654] Sleep (dwMilliseconds=0x1) [0089.659] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.659] Sleep (dwMilliseconds=0x1) [0089.661] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.661] Sleep (dwMilliseconds=0x1) [0089.664] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.664] Sleep (dwMilliseconds=0x1) [0089.676] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.676] Sleep (dwMilliseconds=0x1) [0089.710] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.710] Sleep (dwMilliseconds=0x1) [0089.714] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.714] Sleep (dwMilliseconds=0x1) [0089.716] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.716] Sleep (dwMilliseconds=0x1) [0089.725] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.725] Sleep (dwMilliseconds=0x1) [0089.727] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.727] Sleep (dwMilliseconds=0x1) [0089.730] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.730] Sleep (dwMilliseconds=0x1) [0089.733] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.733] Sleep (dwMilliseconds=0x1) [0089.735] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.735] Sleep (dwMilliseconds=0x1) [0089.737] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.737] Sleep (dwMilliseconds=0x1) [0089.741] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.741] Sleep (dwMilliseconds=0x1) [0089.743] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.743] Sleep (dwMilliseconds=0x1) [0089.745] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.745] Sleep (dwMilliseconds=0x1) [0089.784] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.784] Sleep (dwMilliseconds=0x1) [0089.788] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.788] Sleep (dwMilliseconds=0x1) [0089.792] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.792] Sleep (dwMilliseconds=0x1) [0089.794] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.794] Sleep (dwMilliseconds=0x1) [0089.796] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.796] Sleep (dwMilliseconds=0x1) [0089.798] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.798] Sleep (dwMilliseconds=0x1) [0089.801] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.801] Sleep (dwMilliseconds=0x1) [0089.803] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.803] Sleep (dwMilliseconds=0x1) [0089.805] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.805] Sleep (dwMilliseconds=0x1) [0089.809] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.809] Sleep (dwMilliseconds=0x1) [0089.850] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.850] Sleep (dwMilliseconds=0x1) [0089.853] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.853] Sleep (dwMilliseconds=0x1) [0089.855] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.855] Sleep (dwMilliseconds=0x1) [0089.861] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.861] Sleep (dwMilliseconds=0x1) [0089.863] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.863] Sleep (dwMilliseconds=0x1) [0089.910] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.910] Sleep (dwMilliseconds=0x1) [0089.912] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.912] Sleep (dwMilliseconds=0x1) [0089.917] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.917] Sleep (dwMilliseconds=0x1) [0089.921] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.921] Sleep (dwMilliseconds=0x1) [0089.925] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.925] Sleep (dwMilliseconds=0x1) [0089.929] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.929] Sleep (dwMilliseconds=0x1) [0089.933] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.933] Sleep (dwMilliseconds=0x1) [0089.983] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.983] Sleep (dwMilliseconds=0x1) [0089.987] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.987] Sleep (dwMilliseconds=0x1) [0089.992] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0089.992] Sleep (dwMilliseconds=0x1) [0090.000] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.000] Sleep (dwMilliseconds=0x1) [0090.028] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.028] Sleep (dwMilliseconds=0x1) [0090.047] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.047] Sleep (dwMilliseconds=0x1) [0090.051] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.051] Sleep (dwMilliseconds=0x1) [0090.053] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.053] Sleep (dwMilliseconds=0x1) [0090.055] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.055] Sleep (dwMilliseconds=0x1) [0090.057] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.057] Sleep (dwMilliseconds=0x1) [0090.059] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.059] Sleep (dwMilliseconds=0x1) [0090.062] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.062] Sleep (dwMilliseconds=0x1) [0090.064] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.064] Sleep (dwMilliseconds=0x1) [0090.077] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.077] Sleep (dwMilliseconds=0x1) [0090.079] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.079] Sleep (dwMilliseconds=0x1) [0090.082] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.082] Sleep (dwMilliseconds=0x1) [0090.087] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.087] Sleep (dwMilliseconds=0x1) [0090.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.128] Sleep (dwMilliseconds=0x1) [0090.130] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.130] Sleep (dwMilliseconds=0x1) [0090.135] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.135] Sleep (dwMilliseconds=0x1) [0090.138] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.138] Sleep (dwMilliseconds=0x1) [0090.142] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.142] Sleep (dwMilliseconds=0x1) [0090.144] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.144] Sleep (dwMilliseconds=0x1) [0090.146] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.146] Sleep (dwMilliseconds=0x1) [0090.159] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.159] Sleep (dwMilliseconds=0x1) [0090.169] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.169] Sleep (dwMilliseconds=0x1) [0090.172] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.172] Sleep (dwMilliseconds=0x1) [0090.174] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.174] Sleep (dwMilliseconds=0x1) [0090.176] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.176] Sleep (dwMilliseconds=0x1) [0090.233] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.234] Sleep (dwMilliseconds=0x1) [0090.237] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.237] Sleep (dwMilliseconds=0x1) [0090.240] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.240] Sleep (dwMilliseconds=0x1) [0090.245] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.245] Sleep (dwMilliseconds=0x1) [0090.247] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.247] Sleep (dwMilliseconds=0x1) [0090.250] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.250] Sleep (dwMilliseconds=0x1) [0090.270] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.270] Sleep (dwMilliseconds=0x1) [0090.312] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.312] Sleep (dwMilliseconds=0x1) [0090.315] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.315] Sleep (dwMilliseconds=0x1) [0090.318] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.318] Sleep (dwMilliseconds=0x1) [0090.326] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.326] Sleep (dwMilliseconds=0x1) [0090.329] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.329] Sleep (dwMilliseconds=0x1) [0090.331] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.331] Sleep (dwMilliseconds=0x1) [0090.334] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.334] Sleep (dwMilliseconds=0x1) [0090.336] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.336] Sleep (dwMilliseconds=0x1) [0090.339] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.339] Sleep (dwMilliseconds=0x1) [0090.345] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.345] Sleep (dwMilliseconds=0x1) [0090.347] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.347] Sleep (dwMilliseconds=0x1) [0090.383] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.383] Sleep (dwMilliseconds=0x1) [0090.386] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.386] Sleep (dwMilliseconds=0x1) [0090.392] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.393] Sleep (dwMilliseconds=0x1) [0090.397] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.397] Sleep (dwMilliseconds=0x1) [0090.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.399] Sleep (dwMilliseconds=0x1) [0090.402] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.402] Sleep (dwMilliseconds=0x1) [0090.410] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.410] Sleep (dwMilliseconds=0x1) [0090.413] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.413] Sleep (dwMilliseconds=0x1) [0090.415] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.415] Sleep (dwMilliseconds=0x1) [0090.417] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.417] Sleep (dwMilliseconds=0x1) [0090.419] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.419] Sleep (dwMilliseconds=0x1) [0090.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.470] Sleep (dwMilliseconds=0x1) [0090.473] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.473] Sleep (dwMilliseconds=0x1) [0090.476] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.476] Sleep (dwMilliseconds=0x1) [0090.480] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.480] Sleep (dwMilliseconds=0x1) [0090.482] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.482] Sleep (dwMilliseconds=0x1) [0090.485] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.485] Sleep (dwMilliseconds=0x1) [0090.493] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.493] Sleep (dwMilliseconds=0x1) [0090.624] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.624] Sleep (dwMilliseconds=0x1) [0090.644] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.644] Sleep (dwMilliseconds=0x1) [0090.666] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.666] Sleep (dwMilliseconds=0x1) [0090.674] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.674] Sleep (dwMilliseconds=0x1) [0090.679] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.679] Sleep (dwMilliseconds=0x1) [0090.682] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.682] Sleep (dwMilliseconds=0x1) [0090.686] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.686] Sleep (dwMilliseconds=0x1) [0090.688] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.688] Sleep (dwMilliseconds=0x1) [0090.690] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.690] Sleep (dwMilliseconds=0x1) [0090.692] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.692] Sleep (dwMilliseconds=0x1) [0090.695] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.695] Sleep (dwMilliseconds=0x1) [0090.698] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.698] Sleep (dwMilliseconds=0x1) [0090.748] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.748] Sleep (dwMilliseconds=0x1) [0090.752] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.752] Sleep (dwMilliseconds=0x1) [0090.756] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.756] Sleep (dwMilliseconds=0x1) [0090.760] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.760] Sleep (dwMilliseconds=0x1) [0090.762] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.762] Sleep (dwMilliseconds=0x1) [0090.765] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.765] Sleep (dwMilliseconds=0x1) [0090.768] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.768] Sleep (dwMilliseconds=0x1) [0090.776] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.776] Sleep (dwMilliseconds=0x1) [0090.827] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.827] Sleep (dwMilliseconds=0x1) [0090.831] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.831] Sleep (dwMilliseconds=0x1) [0090.834] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.834] Sleep (dwMilliseconds=0x1) [0090.836] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.836] Sleep (dwMilliseconds=0x1) [0090.838] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.838] Sleep (dwMilliseconds=0x1) [0090.841] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.841] Sleep (dwMilliseconds=0x1) [0090.846] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.847] Sleep (dwMilliseconds=0x1) [0090.852] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.852] Sleep (dwMilliseconds=0x1) [0090.855] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.855] Sleep (dwMilliseconds=0x1) [0090.911] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.911] Sleep (dwMilliseconds=0x1) [0090.914] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.914] Sleep (dwMilliseconds=0x1) [0090.918] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.918] Sleep (dwMilliseconds=0x1) [0090.922] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.922] Sleep (dwMilliseconds=0x1) [0090.924] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.924] Sleep (dwMilliseconds=0x1) [0090.927] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.927] Sleep (dwMilliseconds=0x1) [0090.929] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.929] Sleep (dwMilliseconds=0x1) [0090.932] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.932] Sleep (dwMilliseconds=0x1) [0090.934] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.934] Sleep (dwMilliseconds=0x1) [0090.937] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.937] Sleep (dwMilliseconds=0x1) [0090.939] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.939] Sleep (dwMilliseconds=0x1) [0090.942] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.942] Sleep (dwMilliseconds=0x1) [0090.944] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.944] Sleep (dwMilliseconds=0x1) [0090.946] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.946] Sleep (dwMilliseconds=0x1) [0090.950] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.950] Sleep (dwMilliseconds=0x1) [0090.953] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.953] Sleep (dwMilliseconds=0x1) [0090.996] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0090.996] Sleep (dwMilliseconds=0x1) [0091.000] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.000] Sleep (dwMilliseconds=0x1) [0091.003] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.003] Sleep (dwMilliseconds=0x1) [0091.006] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.006] Sleep (dwMilliseconds=0x1) [0091.009] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.009] Sleep (dwMilliseconds=0x1) [0091.012] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.012] Sleep (dwMilliseconds=0x1) [0091.015] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.015] Sleep (dwMilliseconds=0x1) [0091.017] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.017] Sleep (dwMilliseconds=0x1) [0091.028] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.028] Sleep (dwMilliseconds=0x1) [0091.032] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.032] Sleep (dwMilliseconds=0x1) [0091.034] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.034] Sleep (dwMilliseconds=0x1) [0091.037] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.037] Sleep (dwMilliseconds=0x1) [0091.043] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.044] Sleep (dwMilliseconds=0x1) [0091.091] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.091] Sleep (dwMilliseconds=0x1) [0091.094] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.094] Sleep (dwMilliseconds=0x1) [0091.098] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.098] Sleep (dwMilliseconds=0x1) [0091.101] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.101] Sleep (dwMilliseconds=0x1) [0091.103] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.103] Sleep (dwMilliseconds=0x1) [0091.111] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.111] Sleep (dwMilliseconds=0x1) [0091.113] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.113] Sleep (dwMilliseconds=0x1) [0091.116] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.116] Sleep (dwMilliseconds=0x1) [0091.119] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.119] Sleep (dwMilliseconds=0x1) [0091.123] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.123] Sleep (dwMilliseconds=0x1) [0091.125] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.125] Sleep (dwMilliseconds=0x1) [0091.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.128] Sleep (dwMilliseconds=0x1) [0091.130] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.131] Sleep (dwMilliseconds=0x1) [0091.192] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.192] Sleep (dwMilliseconds=0x1) [0091.199] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.199] Sleep (dwMilliseconds=0x1) [0091.203] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.203] Sleep (dwMilliseconds=0x1) [0091.206] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.206] Sleep (dwMilliseconds=0x1) [0091.214] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.214] Sleep (dwMilliseconds=0x1) [0091.216] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.216] Sleep (dwMilliseconds=0x1) [0091.219] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.219] Sleep (dwMilliseconds=0x1) [0091.222] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.222] Sleep (dwMilliseconds=0x1) [0091.224] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.224] Sleep (dwMilliseconds=0x1) [0091.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.226] Sleep (dwMilliseconds=0x1) [0091.290] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.290] Sleep (dwMilliseconds=0x1) [0091.293] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.293] Sleep (dwMilliseconds=0x1) [0091.295] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.295] Sleep (dwMilliseconds=0x1) [0091.307] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.307] Sleep (dwMilliseconds=0x1) [0091.353] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.353] Sleep (dwMilliseconds=0x1) [0091.356] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.356] Sleep (dwMilliseconds=0x1) [0091.358] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.358] Sleep (dwMilliseconds=0x1) [0091.362] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.362] Sleep (dwMilliseconds=0x1) [0091.365] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.365] Sleep (dwMilliseconds=0x1) [0091.368] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.369] Sleep (dwMilliseconds=0x1) [0091.371] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.371] Sleep (dwMilliseconds=0x1) [0091.374] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.374] Sleep (dwMilliseconds=0x1) [0091.376] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.376] Sleep (dwMilliseconds=0x1) [0091.378] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.378] Sleep (dwMilliseconds=0x1) [0091.380] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.380] Sleep (dwMilliseconds=0x1) [0091.382] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.382] Sleep (dwMilliseconds=0x1) [0091.384] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.384] Sleep (dwMilliseconds=0x1) [0091.387] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.387] Sleep (dwMilliseconds=0x1) [0091.424] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.424] Sleep (dwMilliseconds=0x1) [0091.427] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.427] Sleep (dwMilliseconds=0x1) [0091.430] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.430] Sleep (dwMilliseconds=0x1) [0091.439] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.439] Sleep (dwMilliseconds=0x1) [0091.442] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.442] Sleep (dwMilliseconds=0x1) [0091.445] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.445] Sleep (dwMilliseconds=0x1) [0091.447] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.447] Sleep (dwMilliseconds=0x1) [0091.449] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.449] Sleep (dwMilliseconds=0x1) [0091.452] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.452] Sleep (dwMilliseconds=0x1) [0091.455] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.455] Sleep (dwMilliseconds=0x1) [0091.457] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.457] Sleep (dwMilliseconds=0x1) [0091.459] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.459] Sleep (dwMilliseconds=0x1) [0091.506] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.506] Sleep (dwMilliseconds=0x1) [0091.509] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.509] Sleep (dwMilliseconds=0x1) [0091.512] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.512] Sleep (dwMilliseconds=0x1) [0091.516] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.516] Sleep (dwMilliseconds=0x1) [0091.518] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.518] Sleep (dwMilliseconds=0x1) [0091.533] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.533] Sleep (dwMilliseconds=0x1) [0091.536] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.536] Sleep (dwMilliseconds=0x1) [0091.538] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.538] Sleep (dwMilliseconds=0x1) [0091.576] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.576] Sleep (dwMilliseconds=0x1) [0091.578] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.578] Sleep (dwMilliseconds=0x1) [0091.582] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.582] Sleep (dwMilliseconds=0x1) [0091.584] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.584] Sleep (dwMilliseconds=0x1) [0091.588] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.588] Sleep (dwMilliseconds=0x1) [0091.594] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.594] Sleep (dwMilliseconds=0x1) [0091.654] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.654] Sleep (dwMilliseconds=0x1) [0091.657] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.657] Sleep (dwMilliseconds=0x1) [0091.660] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.660] Sleep (dwMilliseconds=0x1) [0091.664] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.664] Sleep (dwMilliseconds=0x1) [0091.667] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.667] Sleep (dwMilliseconds=0x1) [0091.670] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.670] Sleep (dwMilliseconds=0x1) [0091.673] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.673] Sleep (dwMilliseconds=0x1) [0091.676] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.676] Sleep (dwMilliseconds=0x1) [0091.679] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.679] Sleep (dwMilliseconds=0x1) [0091.733] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.733] Sleep (dwMilliseconds=0x1) [0091.739] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.739] Sleep (dwMilliseconds=0x1) [0091.742] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.742] Sleep (dwMilliseconds=0x1) [0091.747] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.747] Sleep (dwMilliseconds=0x1) [0091.749] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.750] Sleep (dwMilliseconds=0x1) [0091.775] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.775] Sleep (dwMilliseconds=0x1) [0091.785] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.786] Sleep (dwMilliseconds=0x1) [0091.799] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.799] Sleep (dwMilliseconds=0x1) [0091.806] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.806] Sleep (dwMilliseconds=0x1) [0091.836] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.836] Sleep (dwMilliseconds=0x1) [0091.841] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.841] Sleep (dwMilliseconds=0x1) [0091.845] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.845] Sleep (dwMilliseconds=0x1) [0091.848] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.848] Sleep (dwMilliseconds=0x1) [0091.851] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.851] Sleep (dwMilliseconds=0x1) [0091.853] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.853] Sleep (dwMilliseconds=0x1) [0091.857] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.857] Sleep (dwMilliseconds=0x1) [0091.860] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.860] Sleep (dwMilliseconds=0x1) [0091.862] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.862] Sleep (dwMilliseconds=0x1) [0091.864] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.864] Sleep (dwMilliseconds=0x1) [0091.866] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.866] Sleep (dwMilliseconds=0x1) [0091.898] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.898] Sleep (dwMilliseconds=0x1) [0091.901] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.901] Sleep (dwMilliseconds=0x1) [0091.905] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.905] Sleep (dwMilliseconds=0x1) [0091.909] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.909] Sleep (dwMilliseconds=0x1) [0091.911] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.911] Sleep (dwMilliseconds=0x1) [0091.913] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.913] Sleep (dwMilliseconds=0x1) [0091.917] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.917] Sleep (dwMilliseconds=0x1) [0091.919] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.919] Sleep (dwMilliseconds=0x1) [0091.923] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.923] Sleep (dwMilliseconds=0x1) [0091.925] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.926] Sleep (dwMilliseconds=0x1) [0091.932] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.932] Sleep (dwMilliseconds=0x1) [0091.940] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.940] Sleep (dwMilliseconds=0x1) [0091.943] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.943] Sleep (dwMilliseconds=0x1) [0091.948] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0091.948] Sleep (dwMilliseconds=0x1) [0092.005] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.005] Sleep (dwMilliseconds=0x1) [0092.009] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.009] Sleep (dwMilliseconds=0x1) [0092.023] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.023] Sleep (dwMilliseconds=0x1) [0092.028] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.028] Sleep (dwMilliseconds=0x1) [0092.033] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.033] Sleep (dwMilliseconds=0x1) [0092.037] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.038] Sleep (dwMilliseconds=0x1) [0092.041] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.041] Sleep (dwMilliseconds=0x1) [0092.044] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.044] Sleep (dwMilliseconds=0x1) [0092.047] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.047] Sleep (dwMilliseconds=0x1) [0092.050] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.050] Sleep (dwMilliseconds=0x1) [0092.052] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.052] Sleep (dwMilliseconds=0x1) [0092.054] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.055] Sleep (dwMilliseconds=0x1) [0092.106] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.106] Sleep (dwMilliseconds=0x1) [0092.111] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.111] Sleep (dwMilliseconds=0x1) [0092.114] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.114] Sleep (dwMilliseconds=0x1) [0092.117] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.117] Sleep (dwMilliseconds=0x1) [0092.120] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.120] Sleep (dwMilliseconds=0x1) [0092.124] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.124] Sleep (dwMilliseconds=0x1) [0092.147] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.147] Sleep (dwMilliseconds=0x1) [0092.162] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.162] Sleep (dwMilliseconds=0x1) [0092.166] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.166] Sleep (dwMilliseconds=0x1) [0092.170] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.170] Sleep (dwMilliseconds=0x1) [0092.175] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.175] Sleep (dwMilliseconds=0x1) [0092.177] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.177] Sleep (dwMilliseconds=0x1) [0092.181] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.181] Sleep (dwMilliseconds=0x1) [0092.185] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.185] Sleep (dwMilliseconds=0x1) [0092.187] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.187] Sleep (dwMilliseconds=0x1) [0092.190] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.190] Sleep (dwMilliseconds=0x1) [0092.192] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.192] Sleep (dwMilliseconds=0x1) [0092.198] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.198] Sleep (dwMilliseconds=0x1) [0092.248] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.248] Sleep (dwMilliseconds=0x1) [0092.252] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.252] Sleep (dwMilliseconds=0x1) [0092.274] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.274] Sleep (dwMilliseconds=0x1) [0092.281] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.281] Sleep (dwMilliseconds=0x1) [0092.285] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.285] Sleep (dwMilliseconds=0x1) [0092.289] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.289] Sleep (dwMilliseconds=0x1) [0092.292] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.292] Sleep (dwMilliseconds=0x1) [0092.295] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.295] Sleep (dwMilliseconds=0x1) [0092.301] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.301] Sleep (dwMilliseconds=0x1) [0092.303] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.303] Sleep (dwMilliseconds=0x1) [0092.326] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.326] Sleep (dwMilliseconds=0x1) [0092.329] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.329] Sleep (dwMilliseconds=0x1) [0092.334] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.334] Sleep (dwMilliseconds=0x1) [0092.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.338] Sleep (dwMilliseconds=0x1) [0092.342] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.342] Sleep (dwMilliseconds=0x1) [0092.348] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.348] Sleep (dwMilliseconds=0x1) [0092.352] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.352] Sleep (dwMilliseconds=0x1) [0092.357] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.357] Sleep (dwMilliseconds=0x1) [0092.360] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.360] Sleep (dwMilliseconds=0x1) [0092.364] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.364] Sleep (dwMilliseconds=0x1) [0092.368] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.368] Sleep (dwMilliseconds=0x1) [0092.373] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.373] Sleep (dwMilliseconds=0x1) [0092.386] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.386] Sleep (dwMilliseconds=0x1) [0092.390] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.390] Sleep (dwMilliseconds=0x1) [0092.424] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.424] Sleep (dwMilliseconds=0x1) [0092.427] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.427] Sleep (dwMilliseconds=0x1) [0092.429] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.429] Sleep (dwMilliseconds=0x1) [0092.434] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.434] Sleep (dwMilliseconds=0x1) [0092.437] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.437] Sleep (dwMilliseconds=0x1) [0092.440] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.440] Sleep (dwMilliseconds=0x1) [0092.443] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.444] Sleep (dwMilliseconds=0x1) [0092.486] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.486] Sleep (dwMilliseconds=0x1) [0092.489] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.489] Sleep (dwMilliseconds=0x1) [0092.491] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.491] Sleep (dwMilliseconds=0x1) [0092.496] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.496] Sleep (dwMilliseconds=0x1) [0092.498] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.498] Sleep (dwMilliseconds=0x1) [0092.501] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.501] Sleep (dwMilliseconds=0x1) [0092.548] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.548] Sleep (dwMilliseconds=0x1) [0092.554] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.554] Sleep (dwMilliseconds=0x1) [0092.558] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.558] Sleep (dwMilliseconds=0x1) [0092.612] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.612] Sleep (dwMilliseconds=0x1) [0092.617] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.617] Sleep (dwMilliseconds=0x1) [0092.620] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.620] Sleep (dwMilliseconds=0x1) [0092.624] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.624] Sleep (dwMilliseconds=0x1) [0092.627] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.627] Sleep (dwMilliseconds=0x1) [0092.630] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.630] Sleep (dwMilliseconds=0x1) [0092.632] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.632] Sleep (dwMilliseconds=0x1) [0092.634] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.634] Sleep (dwMilliseconds=0x1) [0092.638] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.638] Sleep (dwMilliseconds=0x1) [0092.641] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.641] Sleep (dwMilliseconds=0x1) [0092.644] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.644] Sleep (dwMilliseconds=0x1) [0092.647] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.647] Sleep (dwMilliseconds=0x1) [0092.649] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.649] Sleep (dwMilliseconds=0x1) [0092.651] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.651] Sleep (dwMilliseconds=0x1) [0092.653] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.653] Sleep (dwMilliseconds=0x1) [0092.655] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.655] Sleep (dwMilliseconds=0x1) [0092.701] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.701] Sleep (dwMilliseconds=0x1) [0092.705] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.705] Sleep (dwMilliseconds=0x1) [0092.709] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.710] Sleep (dwMilliseconds=0x1) [0092.722] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.722] Sleep (dwMilliseconds=0x1) [0092.731] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.731] Sleep (dwMilliseconds=0x1) [0092.737] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.737] Sleep (dwMilliseconds=0x1) [0092.741] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.741] Sleep (dwMilliseconds=0x1) [0092.743] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.743] Sleep (dwMilliseconds=0x1) [0092.745] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.745] Sleep (dwMilliseconds=0x1) [0092.749] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.749] Sleep (dwMilliseconds=0x1) [0092.752] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.752] Sleep (dwMilliseconds=0x1) [0092.755] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.755] Sleep (dwMilliseconds=0x1) [0092.817] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.817] Sleep (dwMilliseconds=0x1) [0092.820] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.820] Sleep (dwMilliseconds=0x1) [0092.824] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.824] Sleep (dwMilliseconds=0x1) [0092.833] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.833] Sleep (dwMilliseconds=0x1) [0092.837] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.837] Sleep (dwMilliseconds=0x1) [0092.839] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.839] Sleep (dwMilliseconds=0x1) [0092.843] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.843] Sleep (dwMilliseconds=0x1) [0092.847] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.847] Sleep (dwMilliseconds=0x1) [0092.849] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.849] Sleep (dwMilliseconds=0x1) [0092.853] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.853] Sleep (dwMilliseconds=0x1) [0092.856] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.856] Sleep (dwMilliseconds=0x1) [0092.858] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.858] Sleep (dwMilliseconds=0x1) [0092.860] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.860] Sleep (dwMilliseconds=0x1) [0092.862] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.862] Sleep (dwMilliseconds=0x1) [0092.867] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.867] Sleep (dwMilliseconds=0x1) [0092.869] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.869] Sleep (dwMilliseconds=0x1) [0092.962] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.962] Sleep (dwMilliseconds=0x1) [0092.965] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.965] Sleep (dwMilliseconds=0x1) [0092.977] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.977] Sleep (dwMilliseconds=0x1) [0092.981] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0092.981] Sleep (dwMilliseconds=0x1) [0093.031] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.031] Sleep (dwMilliseconds=0x1) [0093.043] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.043] Sleep (dwMilliseconds=0x1) [0093.046] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.046] Sleep (dwMilliseconds=0x1) [0093.050] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.050] Sleep (dwMilliseconds=0x1) [0093.055] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.055] Sleep (dwMilliseconds=0x1) [0093.057] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.057] Sleep (dwMilliseconds=0x1) [0093.061] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.061] Sleep (dwMilliseconds=0x1) [0093.063] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.064] Sleep (dwMilliseconds=0x1) [0093.068] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.068] Sleep (dwMilliseconds=0x1) [0093.116] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.116] Sleep (dwMilliseconds=0x1) [0093.126] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.126] Sleep (dwMilliseconds=0x1) [0093.128] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.128] Sleep (dwMilliseconds=0x1) [0093.132] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.132] Sleep (dwMilliseconds=0x1) [0093.139] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.139] Sleep (dwMilliseconds=0x1) [0093.141] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.141] Sleep (dwMilliseconds=0x1) [0093.200] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.200] Sleep (dwMilliseconds=0x1) [0093.203] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.203] Sleep (dwMilliseconds=0x1) [0093.207] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.207] Sleep (dwMilliseconds=0x1) [0093.213] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.213] Sleep (dwMilliseconds=0x1) [0093.216] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.216] Sleep (dwMilliseconds=0x1) [0093.218] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.218] Sleep (dwMilliseconds=0x1) [0093.221] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.221] Sleep (dwMilliseconds=0x1) [0093.226] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.226] Sleep (dwMilliseconds=0x1) [0093.231] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.231] Sleep (dwMilliseconds=0x1) [0093.235] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.235] Sleep (dwMilliseconds=0x1) [0093.239] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.239] Sleep (dwMilliseconds=0x1) [0093.243] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.243] Sleep (dwMilliseconds=0x1) [0093.245] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.245] Sleep (dwMilliseconds=0x1) [0093.247] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.247] Sleep (dwMilliseconds=0x1) [0093.250] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.250] Sleep (dwMilliseconds=0x1) [0093.269] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.269] Sleep (dwMilliseconds=0x1) [0093.325] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.325] Sleep (dwMilliseconds=0x1) [0093.328] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.328] Sleep (dwMilliseconds=0x1) [0093.331] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.331] Sleep (dwMilliseconds=0x1) [0093.335] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.335] Sleep (dwMilliseconds=0x1) [0093.338] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.338] Sleep (dwMilliseconds=0x1) [0093.342] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.342] Sleep (dwMilliseconds=0x1) [0093.344] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.344] Sleep (dwMilliseconds=0x1) [0093.349] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.349] Sleep (dwMilliseconds=0x1) [0093.352] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.352] Sleep (dwMilliseconds=0x1) [0093.356] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.356] Sleep (dwMilliseconds=0x1) [0093.358] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.358] Sleep (dwMilliseconds=0x1) [0093.362] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.362] Sleep (dwMilliseconds=0x1) [0093.365] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.365] Sleep (dwMilliseconds=0x1) [0093.369] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.369] Sleep (dwMilliseconds=0x1) [0093.371] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.371] Sleep (dwMilliseconds=0x1) [0093.424] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.424] Sleep (dwMilliseconds=0x1) [0093.428] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.428] Sleep (dwMilliseconds=0x1) [0093.430] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.430] Sleep (dwMilliseconds=0x1) [0093.435] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.435] Sleep (dwMilliseconds=0x1) [0093.443] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.443] Sleep (dwMilliseconds=0x1) [0093.446] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.446] Sleep (dwMilliseconds=0x1) [0093.465] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.465] Sleep (dwMilliseconds=0x1) [0093.472] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.472] Sleep (dwMilliseconds=0x1) [0093.477] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.477] Sleep (dwMilliseconds=0x1) [0093.483] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.483] Sleep (dwMilliseconds=0x1) [0093.485] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.485] Sleep (dwMilliseconds=0x1) [0093.487] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.487] Sleep (dwMilliseconds=0x1) [0093.492] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.493] Sleep (dwMilliseconds=0x1) [0093.496] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.496] Sleep (dwMilliseconds=0x1) [0093.499] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.499] Sleep (dwMilliseconds=0x1) [0093.501] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.501] Sleep (dwMilliseconds=0x1) [0093.503] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.503] Sleep (dwMilliseconds=0x1) [0093.506] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.506] Sleep (dwMilliseconds=0x1) [0093.508] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.508] Sleep (dwMilliseconds=0x1) [0093.515] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.515] Sleep (dwMilliseconds=0x1) [0093.569] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.569] Sleep (dwMilliseconds=0x1) [0093.574] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.574] Sleep (dwMilliseconds=0x1) [0093.578] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.578] Sleep (dwMilliseconds=0x1) [0093.583] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.583] Sleep (dwMilliseconds=0x1) [0093.603] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.603] Sleep (dwMilliseconds=0x1) [0093.605] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.606] Sleep (dwMilliseconds=0x1) [0093.615] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.615] Sleep (dwMilliseconds=0x1) [0093.618] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.618] Sleep (dwMilliseconds=0x1) [0093.623] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.623] Sleep (dwMilliseconds=0x1) [0093.626] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.626] Sleep (dwMilliseconds=0x1) [0093.632] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.632] Sleep (dwMilliseconds=0x1) [0093.726] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.726] Sleep (dwMilliseconds=0x1) [0093.730] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.730] Sleep (dwMilliseconds=0x1) [0093.733] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.733] Sleep (dwMilliseconds=0x1) [0093.735] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.735] Sleep (dwMilliseconds=0x1) [0093.740] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.740] Sleep (dwMilliseconds=0x1) [0093.742] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.742] Sleep (dwMilliseconds=0x1) [0093.747] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.747] Sleep (dwMilliseconds=0x1) [0093.749] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.749] Sleep (dwMilliseconds=0x1) [0093.752] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.752] Sleep (dwMilliseconds=0x1) [0093.755] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.755] Sleep (dwMilliseconds=0x1) [0093.758] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.758] Sleep (dwMilliseconds=0x1) [0093.760] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.760] Sleep (dwMilliseconds=0x1) [0093.787] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.787] Sleep (dwMilliseconds=0x1) [0093.792] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.792] Sleep (dwMilliseconds=0x1) [0093.794] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.794] Sleep (dwMilliseconds=0x1) [0093.798] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.798] Sleep (dwMilliseconds=0x1) [0093.801] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.801] Sleep (dwMilliseconds=0x1) [0093.804] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.804] Sleep (dwMilliseconds=0x1) [0093.806] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.806] Sleep (dwMilliseconds=0x1) [0093.808] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.808] Sleep (dwMilliseconds=0x1) [0093.811] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.811] Sleep (dwMilliseconds=0x1) [0093.815] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.815] Sleep (dwMilliseconds=0x1) [0093.817] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.817] Sleep (dwMilliseconds=0x1) [0093.819] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.819] Sleep (dwMilliseconds=0x1) [0093.878] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.878] Sleep (dwMilliseconds=0x1) [0093.880] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.880] Sleep (dwMilliseconds=0x1) [0093.884] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.884] Sleep (dwMilliseconds=0x1) [0093.887] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.887] Sleep (dwMilliseconds=0x1) [0093.889] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.889] Sleep (dwMilliseconds=0x1) [0093.892] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.892] Sleep (dwMilliseconds=0x1) [0093.896] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.896] Sleep (dwMilliseconds=0x1) [0093.937] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.937] Sleep (dwMilliseconds=0x1) [0093.941] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.941] Sleep (dwMilliseconds=0x1) [0093.943] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.943] Sleep (dwMilliseconds=0x1) [0093.946] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.946] Sleep (dwMilliseconds=0x1) [0093.949] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.949] Sleep (dwMilliseconds=0x1) [0093.951] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.951] Sleep (dwMilliseconds=0x1) [0093.953] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.953] Sleep (dwMilliseconds=0x1) [0093.955] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0093.955] Sleep (dwMilliseconds=0x1) [0094.000] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.000] Sleep (dwMilliseconds=0x1) [0094.004] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.004] Sleep (dwMilliseconds=0x1) [0094.008] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.008] Sleep (dwMilliseconds=0x1) [0094.011] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.011] Sleep (dwMilliseconds=0x1) [0094.013] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.013] Sleep (dwMilliseconds=0x1) [0094.016] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.016] Sleep (dwMilliseconds=0x1) [0094.019] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.019] Sleep (dwMilliseconds=0x1) [0094.022] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.022] Sleep (dwMilliseconds=0x1) [0094.028] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.028] Sleep (dwMilliseconds=0x1) [0094.031] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.031] Sleep (dwMilliseconds=0x1) [0094.036] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.036] Sleep (dwMilliseconds=0x1) [0094.187] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.187] Sleep (dwMilliseconds=0x1) [0094.224] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.224] Sleep (dwMilliseconds=0x1) [0094.227] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.227] Sleep (dwMilliseconds=0x1) [0094.229] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.229] Sleep (dwMilliseconds=0x1) [0094.235] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.235] Sleep (dwMilliseconds=0x1) [0094.239] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.239] Sleep (dwMilliseconds=0x1) [0094.243] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.243] Sleep (dwMilliseconds=0x1) [0094.245] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.246] Sleep (dwMilliseconds=0x1) [0094.250] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.250] Sleep (dwMilliseconds=0x1) [0094.311] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.311] Sleep (dwMilliseconds=0x1) [0094.318] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.318] Sleep (dwMilliseconds=0x1) [0094.321] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.321] Sleep (dwMilliseconds=0x1) [0094.324] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.324] Sleep (dwMilliseconds=0x1) [0094.326] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.326] Sleep (dwMilliseconds=0x1) [0094.333] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.333] Sleep (dwMilliseconds=0x1) [0094.339] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.339] Sleep (dwMilliseconds=0x1) [0094.343] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.343] Sleep (dwMilliseconds=0x1) [0094.345] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.345] Sleep (dwMilliseconds=0x1) [0094.347] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.347] Sleep (dwMilliseconds=0x1) [0094.350] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.350] Sleep (dwMilliseconds=0x1) [0094.389] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.389] Sleep (dwMilliseconds=0x1) [0094.392] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.392] Sleep (dwMilliseconds=0x1) [0094.395] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.395] Sleep (dwMilliseconds=0x1) [0094.399] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.399] Sleep (dwMilliseconds=0x1) [0094.402] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.402] Sleep (dwMilliseconds=0x1) [0094.408] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.408] Sleep (dwMilliseconds=0x1) [0094.452] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.452] Sleep (dwMilliseconds=0x1) [0094.455] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.455] Sleep (dwMilliseconds=0x1) [0094.458] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.458] Sleep (dwMilliseconds=0x1) [0094.462] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.462] Sleep (dwMilliseconds=0x1) [0094.465] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.465] Sleep (dwMilliseconds=0x1) [0094.470] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.470] Sleep (dwMilliseconds=0x1) [0094.473] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.473] Sleep (dwMilliseconds=0x1) [0094.477] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.477] Sleep (dwMilliseconds=0x1) [0094.480] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.480] Sleep (dwMilliseconds=0x1) [0094.482] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.482] Sleep (dwMilliseconds=0x1) [0094.484] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.484] Sleep (dwMilliseconds=0x1) [0094.535] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.535] Sleep (dwMilliseconds=0x1) [0094.539] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.539] Sleep (dwMilliseconds=0x1) [0094.543] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.544] Sleep (dwMilliseconds=0x1) [0094.556] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.557] Sleep (dwMilliseconds=0x1) [0094.586] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.586] Sleep (dwMilliseconds=0x1) [0094.589] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0094.589] Sleep (dwMilliseconds=0x1) [0094.607] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x117dba8 [0094.609] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x117dc08 [0094.610] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fc00, lpdwDisposition=0x0 | out: phkResult=0x43fc00*=0x1fc, lpdwDisposition=0x0) returned 0x0 [0094.611] RegSetValueExW (in: hKey=0x1fc, lpValueName="Ed7", Reserved=0x0, dwType=0x3, lpData=0x973420*, cbData=0x20 | out: lpData=0x973420*) returned 0x0 [0094.612] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.612] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fc18, lpdwDisposition=0x0 | out: phkResult=0x43fc18*=0x1fc, lpdwDisposition=0x0) returned 0x0 [0094.612] RegSetValueExW (in: hKey=0x1fc, lpValueName="QIeQ", Reserved=0x0, dwType=0x3, lpData=0x973440*, cbData=0x20 | out: lpData=0x973440*) returned 0x0 [0094.612] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.612] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fc18, lpdwDisposition=0x0 | out: phkResult=0x43fc18*=0x1fc, lpdwDisposition=0x0) returned 0x0 [0094.612] RegSetValueExW (in: hKey=0x1fc, lpValueName="96Ia6", Reserved=0x0, dwType=0x3, lpData=0x973460*, cbData=0x58 | out: lpData=0x973460*) returned 0x0 [0094.612] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.612] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fc18, lpdwDisposition=0x0 | out: phkResult=0x43fc18*=0x1fc, lpdwDisposition=0x0) returned 0x0 [0094.612] RegSetValueExW (in: hKey=0x1fc, lpValueName="Ucr1RB", Reserved=0x0, dwType=0x3, lpData=0x9734b8*, cbData=0x58 | out: lpData=0x9734b8*) returned 0x0 [0094.613] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.613] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dba8) returned 1 [0094.613] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dc08) returned 1 [0094.613] CryptBinaryToStringW (in: pbBinary=0x973460, cbBinary=0x58, dwFlags=0x40000001, pszString=0x0, pcchString=0x43fc30 | out: pszString=0x0, pcchString=0x43fc30) returned 1 [0094.613] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x117dba8 [0094.613] CryptBinaryToStringW (in: pbBinary=0x973460, cbBinary=0x58, dwFlags=0x40000001, pszString=0x117dba8, pcchString=0x43fc30 | out: pszString="xbBZ+ils8JanYIK+s1bxQsSzYGDlIShYoMLGIHXBJwBbix3fm+ug9ABeH2mvSQCXJC+WytNBHz23AZqvNmWFPgDqFgV/ER5yiT/TCVAmo0e9FU1pjMA8kg==", pcchString=0x43fc30) returned 1 [0094.613] CryptBinaryToStringW (in: pbBinary=0x973420, cbBinary=0x20, dwFlags=0x40000001, pszString=0x0, pcchString=0x43fcbc | out: pszString=0x0, pcchString=0x43fcbc) returned 1 [0094.613] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x117d7e0 [0094.613] CryptBinaryToStringW (in: pbBinary=0x973420, cbBinary=0x20, dwFlags=0x40000001, pszString=0x117d7e0, pcchString=0x43fcbc | out: pszString="9/AgyLvWEviWbvuayR2k0Q140e9LZJ5hwrmto/zCyFM=", pcchString=0x43fcbc) returned 1 [0094.614] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x22) returned 0x117dca8 [0094.614] GetWindowsDirectoryW (in: lpBuffer=0x0, uSize=0x0 | out: lpBuffer=0x0) returned 0xb [0094.614] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x16) returned 0x117d728 [0094.614] GetWindowsDirectoryW (in: lpBuffer=0x117d728, uSize=0xb | out: lpBuffer="C:\\Windows") returned 0xa [0094.614] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x43fc88, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x43fc88*=0xc287f38, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0094.614] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d728) returned 1 [0094.614] wsprintfW (in: param_1=0x117dca8, param_2="%08X%08X" | out: param_1="2A6F2D600C287F38") returned 16 [0094.615] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc54 | out: phkResult=0x43fc54*=0x1fc) returned 0x0 [0094.615] RegQueryValueExW (in: hKey=0x1fc, lpValueName="wJWsTYE", lpReserved=0x0, lpType=0x43fcec, lpData=0x0, lpcbData=0x43fcf0*=0xc287f38 | out: lpType=0x43fcec*=0x0, lpData=0x0, lpcbData=0x43fcf0*=0x0) returned 0x2 [0094.616] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.616] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc7c | out: phkResult=0x43fc7c*=0x0) returned 0x2 [0094.616] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x14) returned 0x117d5a8 [0094.616] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fc74, lpdwDisposition=0x0 | out: phkResult=0x43fc74*=0x1fc, lpdwDisposition=0x0) returned 0x0 [0094.616] RegSetValueExW (in: hKey=0x1fc, lpValueName="wJWsTYE", Reserved=0x0, dwType=0x1, lpData=".1yg4ztc5", cbData=0x14 | out: lpData=".1yg4ztc5") returned 0x0 [0094.617] RegCloseKey (hKey=0x1fc) returned 0x0 [0094.617] RtlAllocateHeap (HeapHandle=0x30d0000, Flags=0x8, Size=0xc) returned 0x33ca960 [0094.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1yg4ztc5", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0094.617] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12) returned 0x117d588 [0094.617] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1yg4ztc5", cchWideChar=-1, lpMultiByteStr=0x117d588, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1yg4ztc5", lpUsedDefaultChar=0x0) returned 9 [0094.617] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12) returned 0x117d748 [0094.617] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x202) returned 0x11ffcf0 [0094.617] GetUserNameW (in: lpBuffer=0x11ffcf0, pcbBuffer=0x43fcf0 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0x43fcf0) returned 1 [0094.624] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x20) returned 0x117dcd8 [0094.624] GetComputerNameW (in: lpBuffer=0x117dcd8, nSize=0x43fcf0 | out: lpBuffer="XC64ZB", nSize=0x43fcf0) returned 1 [0094.624] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc0c | out: phkResult=0x43fc0c*=0x218) returned 0x0 [0094.624] RegQueryValueExW (in: hKey=0x218, lpValueName="Domain", lpReserved=0x0, lpType=0x43fcec, lpData=0x0, lpcbData=0x43fcf0*=0x0 | out: lpType=0x43fcec*=0x1, lpData=0x0, lpcbData=0x43fcf0*=0x2) returned 0x0 [0094.624] RegCloseKey (hKey=0x218) returned 0x0 [0094.624] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa) returned 0x1185e78 [0094.624] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Control Panel\\International", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc50 | out: phkResult=0x43fc50*=0x218) returned 0x0 [0094.624] RegQueryValueExW (in: hKey=0x218, lpValueName="LocaleName", lpReserved=0x0, lpType=0x43fcec, lpData=0x0, lpcbData=0x43fcf0*=0x0 | out: lpType=0x43fcec*=0x1, lpData=0x0, lpcbData=0x43fcf0*=0xc) returned 0x0 [0094.624] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x1185f20 [0094.624] RegQueryValueExW (in: hKey=0x218, lpValueName="LocaleName", lpReserved=0x0, lpType=0x43fcec, lpData=0x1185f20, lpcbData=0x43fcf0*=0xc | out: lpType=0x43fcec*=0x1, lpData="en-US", lpcbData=0x43fcf0*=0xc) returned 0x0 [0094.624] RegCloseKey (hKey=0x218) returned 0x0 [0094.625] GetUserDefaultUILanguage () returned 0x409 [0094.625] GetSystemDefaultUILanguage () returned 0x409 [0094.625] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1 [0094.625] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e250 [0094.625] GetKeyboardLayoutList (in: nBuff=1, lpList=0x117e250 | out: lpList=0x117e250) returned 1 [0094.625] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e250) returned 1 [0094.625] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc) returned 0x1186070 [0094.625] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x1, phkResult=0x43fc2c | out: phkResult=0x43fc2c*=0x218) returned 0x0 [0094.625] RegQueryValueExW (in: hKey=0x218, lpValueName="productName", lpReserved=0x0, lpType=0x43fcec, lpData=0x0, lpcbData=0x43fcf0*=0x0 | out: lpType=0x43fcec*=0x1, lpData=0x0, lpcbData=0x43fcf0*=0x1e) returned 0x0 [0094.625] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1e) returned 0x11fff00 [0094.625] RegQueryValueExW (in: hKey=0x218, lpValueName="productName", lpReserved=0x0, lpType=0x43fcec, lpData=0x11fff00, lpcbData=0x43fcf0*=0x1e | out: lpType=0x43fcec*=0x1, lpData="Windows 10 Pro", lpcbData=0x43fcf0*=0x1e) returned 0x0 [0094.625] RegCloseKey (hKey=0x218) returned 0x0 [0094.625] GetDriveTypeW (lpRootPathName="A:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="B:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0094.626] GetDriveTypeW (lpRootPathName="D:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="E:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="F:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="G:\\") returned 0x1 [0094.626] GetDriveTypeW (lpRootPathName="H:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="I:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="J:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="K:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="L:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="M:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="N:\\") returned 0x1 [0094.627] GetDriveTypeW (lpRootPathName="O:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="P:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="Q:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="R:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="S:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="T:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="U:\\") returned 0x1 [0094.628] GetDriveTypeW (lpRootPathName="V:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="W:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="X:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="Y:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x1 [0094.629] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x16) returned 0x117d4c8 [0094.629] GetDriveTypeW (lpRootPathName="A:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="B:\\") returned 0x1 [0094.629] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0094.630] GetDiskFreeSpaceExW (in: lpDirectoryName="C:\\", lpFreeBytesAvailableToCaller=0x43fcd8, lpTotalNumberOfBytes=0x117d4ce, lpTotalNumberOfFreeBytes=0x117d4d6 | out: lpFreeBytesAvailableToCaller=0x43fcd8, lpTotalNumberOfBytes=0x117d4ce, lpTotalNumberOfFreeBytes=0x117d4d6) returned 1 [0094.630] GetDriveTypeW (lpRootPathName="D:\\") returned 0x1 [0094.630] GetDriveTypeW (lpRootPathName="E:\\") returned 0x1 [0094.630] GetDriveTypeW (lpRootPathName="F:\\") returned 0x1 [0094.630] GetDriveTypeW (lpRootPathName="G:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="H:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="I:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="J:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="K:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="L:\\") returned 0x1 [0094.635] GetDriveTypeW (lpRootPathName="M:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="N:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="O:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="P:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="Q:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="R:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="S:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="T:\\") returned 0x1 [0094.636] GetDriveTypeW (lpRootPathName="U:\\") returned 0x1 [0094.637] GetDriveTypeW (lpRootPathName="V:\\") returned 0x1 [0094.637] GetDriveTypeW (lpRootPathName="W:\\") returned 0x1 [0094.637] GetDriveTypeW (lpRootPathName="X:\\") returned 0x1 [0094.637] GetDriveTypeW (lpRootPathName="Y:\\") returned 0x1 [0094.637] GetDriveTypeW (lpRootPathName="Z:\\") returned 0x1 [0094.637] CryptBinaryToStringW (in: pbBinary=0x117d4c8, cbBinary=0x16, dwFlags=0x40000001, pszString=0x0, pcchString=0x43fcf4 | out: pszString=0x0, pcchString=0x43fcf4) returned 1 [0094.637] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x11fff28 [0094.637] CryptBinaryToStringW (in: pbBinary=0x117d4c8, cbBinary=0x16, dwFlags=0x40000001, pszString=0x11fff28, pcchString=0x43fcf4 | out: pszString="QwADAAAAAPDP/38AAAAAEJdEfAAAAA==", pcchString=0x43fcf4) returned 1 [0094.637] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d4c8) returned 1 [0094.637] GetNativeSystemInfo (in: lpSystemInfo=0x43fcbc | out: lpSystemInfo=0x43fcbc*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0094.638] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fab4 | out: phkResult=0x43fab4*=0x218) returned 0x0 [0094.638] RegQueryValueExW (in: hKey=0x218, lpValueName="JmfOBvhb", lpReserved=0x0, lpType=0x43fc8c, lpData=0x0, lpcbData=0x43fcdc*=0x55070006 | out: lpType=0x43fc8c*=0x0, lpData=0x0, lpcbData=0x43fcdc*=0x0) returned 0x2 [0094.638] RegCloseKey (hKey=0x218) returned 0x0 [0094.638] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fadc | out: phkResult=0x43fadc*=0x0) returned 0x2 [0094.638] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x20000) returned 0x11947f0 [0094.639] _snwprintf (in: _Dest=0x11947f0, _Count=0x20000, _Format="{\"ver\":%d,\"pid\":\"%s\",\"sub\":\"%s\",\"pk\":\"%s\",\"uid\":\"%s\",\"sk\":\"%s\",\"unm\":\"%s\",\"net\":\"%s\",\"grp\":\"%s\",\"lng\":\"%s\",\"bro\":%s,\"os\":\"%s\",\"bit\":%d,\"dsk\":\"%s\",\"ext\":\"%s\"}" | out: _Dest="{\"ver\":519,\"pid\":\"$2a$12$prOX/4eKl8zrpGSC5lnHPecevs5NOckOUW5r3s4JJYDnZZSghvBkq\",\"sub\":\"8254\",\"pk\":\"9/AgyLvWEviWbvuayR2k0Q140e9LZJ5hwrmto/zCyFM=\",\"uid\":\"2A6F2D600C287F38\",\"sk\":\"xbBZ+ils8JanYIK+s1bxQsSzYGDlIShYoMLGIHXBJwBbix3fm+ug9ABeH2mvSQCXJC+WytNBHz23AZqvNmWFPgDqFgV/ER5yiT/TCVAmo0e9FU1pjMA8kg==\",\"unm\":\"RDhJ0CNFevzX\",\"net\":\"XC64ZB\",\"grp\":\"none\",\"lng\":\"en-US\",\"bro\":false,\"os\":\"Windows 10 Pro\",\"bit\":64,\"dsk\":\"QwADAAAAAPDP/38AAAAAEJdEfAAAAA==\",\"ext\":\"1yg4ztc5\"}") returned 462 [0094.639] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3d4) returned 0x1190e70 [0094.641] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11947f0) returned 1 [0094.641] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x2, lpSecurityAttributes=0x0, phkResult=0x43fad8, lpdwDisposition=0x0 | out: phkResult=0x43fad8*=0x218, lpdwDisposition=0x0) returned 0x0 [0094.641] RegSetValueExW (in: hKey=0x218, lpValueName="JmfOBvhb", Reserved=0x0, dwType=0x3, lpData=0x1190e70*, cbData=0x3d4 | out: lpData=0x1190e70*) returned 0x0 [0094.642] RegCloseKey (hKey=0x218) returned 0x0 [0094.642] CryptBinaryToStringW (in: pbBinary=0x1190e70, cbBinary=0x3d4, dwFlags=0x1, pszString=0x0, pcchString=0x43fc94 | out: pszString=0x0, pcchString=0x43fc94) returned 1 [0094.642] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa8e) returned 0x1191250 [0094.642] CryptBinaryToStringW (in: pbBinary=0x1190e70, cbBinary=0x3d4, dwFlags=0x1, pszString=0x1191250, pcchString=0x43fc94 | out: pszString="j1i7SjYdrPJ7xX4gIaFFxvtp6WHNO2EMecqHRKhFJJ7E0udHhwLhcErudWtUIAko\r\n0HTABS2nCPHBqWlF6BMLfAxCBElhA/kc1a5LIt1yx/FWM2Q76vqeeQdTTs5E+noV\r\nwaH5GIpQ91YpJeS2Nz0xaGf+4LkmUNV3fetMfkDzDBECeZdqBRHYQZE8ad6x/1UR\r\nvD5G3F/c1pG2ozRA/yeqZpfpW375MGB90Vqr/XdSkj7qCXhut6HoyVDld8FwYopt\r\n+iVYBI3zMfE9hCNzm8ui5TsEOUG/K+0H5P8nDg+QwTO+0wDU3B2LM8bo/KohhAgS\r\nKOhycLoC1XPAcdN1AwnSC1SScTtzx4X3J1xgdECFbZTUPJHnxvBRhJuHqHyT2O3l\r\nmsga7G76EqcU6zTrS8oa9QAKEhJARtV7pz0uebEiCgESYDEzc9VE668pBkRljXmu\r\n4hanHgSuWBarFCeseZlXnEbw7N+/JqZXIPSz4GCkz5Zlhk6PrO9i13SuiEOJdzSg\r\n0N4FLsi8nfIMQgsM88pmgWu+g8SiSoxsefAhhUJ6IItPxDj9Ev1bRx6YP/QlfVz4\r\nrjq5m8XEAmDPlt0P7x0rLRVURkBV9+V6ByfeCm4X62b9wJIY+/AAQsBIF47NcKi4\r\nnIR9BrWjlGWyoBbnkiuzUuCBGpeJoMT0djRs5TnfPjpNiXCMa9qf9YFSaahf0bHQ\r\n9UoS1GrGoAArbXo4DI27innv9V0MpgQJWnOzrnwYtyzFP3uitauWuHKTkuLnhVUy\r\nKiEXBQE2ZgO8erGK4+QpN8OIzpHV6rFp282mLG311R6Oq9GTELSeNXQwsoXqs70B\r\n4LGriJOOrsQOlpkemDImSKqts73M3/mtuWPv+9lfm62GngrFNqL8naLWZxYCxRvv\r\n7uZ3ZnukzPUyjpjRRn3gZZot4rtXaMgWVQHFjSEA8WLa2EbLO0O3Z/oUdbUjbGS1\r\nAcKk/g0n33yNWbBJs2Fv1mVME+F3U3wAVxtQH1+UmbqVCbekZII6XIcRvqtCePUo\r\nBv8/nNdg1wT4BOB7CteNV/6W5JF5s97cS05ej1tJ/pwC1z1l8gqGv1rQYX3jIpHq\r\n+TrLnYZE7AYH1d+FW2hghmUwMCALICIOVPvdT3RKUc3gXi0DcP4lbAIfpjEyiG+O\r\nStNLyvlFkYs9K7WnmGowaj+cRLe5TndJY97+JLBSFUZTemPx5rwdes2M2QzjM3Bw\r\nGt5gOuoLw1dFcySF7R8PVK7T8C/BxjOrroZX5ml8oF2lDjl1hxP91jM2kNls2BYK\r\npLMzSCHA1AX1aBB0VZqmzY2XVj4=\r\n", pcchString=0x43fc94) returned 1 [0094.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190e70) returned 1 [0094.642] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x108a) returned 0x1191ce8 [0094.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1193788) returned 1 [0094.644] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1b0c) returned 0x117e318 [0094.644] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1191ce8) returned 1 [0094.645] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1b12) returned 0x117fe30 [0094.645] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e318) returned 1 [0094.645] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1191250) returned 1 [0094.645] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x28) returned 0x11fff78 [0094.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x28) returned 0x11fffa8 [0094.646] RtlAllocateHeap (HeapHandle=0x2cb0000, Flags=0x8, Size=0xc) returned 0x30a8790 [0094.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1yg4ztc5-readme.txt", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x28) returned 0x117d848 [0094.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1yg4ztc5-readme.txt", cchWideChar=-1, lpMultiByteStr=0x117d848, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1yg4ztc5-readme.txt", lpUsedDefaultChar=0x0) returned 20 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x28) returned 0x117d878 [0094.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffa8) returned 1 [0094.646] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\BlackLivesMatter", ulOptions=0x0, samDesired=0x1, phkResult=0x43fa58 | out: phkResult=0x43fa58*=0x218) returned 0x0 [0094.646] RegQueryValueExW (in: hKey=0x218, lpValueName="JmfOBvhb", lpReserved=0x0, lpType=0x43fc30, lpData=0x0, lpcbData=0x43fcdc*=0x117d5aa | out: lpType=0x43fc30*=0x3, lpData=0x0, lpcbData=0x43fcdc*=0x3d4) returned 0x0 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3d4) returned 0x117e318 [0094.646] RegQueryValueExW (in: hKey=0x218, lpValueName="JmfOBvhb", lpReserved=0x0, lpType=0x43fc30, lpData=0x117e318, lpcbData=0x43fcdc*=0x3d4 | out: lpType=0x43fc30*=0x3, lpData=0x117e318*, lpcbData=0x43fcdc*=0x3d4) returned 0x0 [0094.646] RegCloseKey (hKey=0x218) returned 0x0 [0094.646] CryptBinaryToStringW (in: pbBinary=0x117e318, cbBinary=0x3d4, dwFlags=0x1, pszString=0x0, pcchString=0x43fc38 | out: pszString=0x0, pcchString=0x43fc38) returned 1 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa8e) returned 0x117e6f8 [0094.646] CryptBinaryToStringW (in: pbBinary=0x117e318, cbBinary=0x3d4, dwFlags=0x1, pszString=0x117e6f8, pcchString=0x43fc38 | out: pszString="j1i7SjYdrPJ7xX4gIaFFxvtp6WHNO2EMecqHRKhFJJ7E0udHhwLhcErudWtUIAko\r\n0HTABS2nCPHBqWlF6BMLfAxCBElhA/kc1a5LIt1yx/FWM2Q76vqeeQdTTs5E+noV\r\nwaH5GIpQ91YpJeS2Nz0xaGf+4LkmUNV3fetMfkDzDBECeZdqBRHYQZE8ad6x/1UR\r\nvD5G3F/c1pG2ozRA/yeqZpfpW375MGB90Vqr/XdSkj7qCXhut6HoyVDld8FwYopt\r\n+iVYBI3zMfE9hCNzm8ui5TsEOUG/K+0H5P8nDg+QwTO+0wDU3B2LM8bo/KohhAgS\r\nKOhycLoC1XPAcdN1AwnSC1SScTtzx4X3J1xgdECFbZTUPJHnxvBRhJuHqHyT2O3l\r\nmsga7G76EqcU6zTrS8oa9QAKEhJARtV7pz0uebEiCgESYDEzc9VE668pBkRljXmu\r\n4hanHgSuWBarFCeseZlXnEbw7N+/JqZXIPSz4GCkz5Zlhk6PrO9i13SuiEOJdzSg\r\n0N4FLsi8nfIMQgsM88pmgWu+g8SiSoxsefAhhUJ6IItPxDj9Ev1bRx6YP/QlfVz4\r\nrjq5m8XEAmDPlt0P7x0rLRVURkBV9+V6ByfeCm4X62b9wJIY+/AAQsBIF47NcKi4\r\nnIR9BrWjlGWyoBbnkiuzUuCBGpeJoMT0djRs5TnfPjpNiXCMa9qf9YFSaahf0bHQ\r\n9UoS1GrGoAArbXo4DI27innv9V0MpgQJWnOzrnwYtyzFP3uitauWuHKTkuLnhVUy\r\nKiEXBQE2ZgO8erGK4+QpN8OIzpHV6rFp282mLG311R6Oq9GTELSeNXQwsoXqs70B\r\n4LGriJOOrsQOlpkemDImSKqts73M3/mtuWPv+9lfm62GngrFNqL8naLWZxYCxRvv\r\n7uZ3ZnukzPUyjpjRRn3gZZot4rtXaMgWVQHFjSEA8WLa2EbLO0O3Z/oUdbUjbGS1\r\nAcKk/g0n33yNWbBJs2Fv1mVME+F3U3wAVxtQH1+UmbqVCbekZII6XIcRvqtCePUo\r\nBv8/nNdg1wT4BOB7CteNV/6W5JF5s97cS05ej1tJ/pwC1z1l8gqGv1rQYX3jIpHq\r\n+TrLnYZE7AYH1d+FW2hghmUwMCALICIOVPvdT3RKUc3gXi0DcP4lbAIfpjEyiG+O\r\nStNLyvlFkYs9K7WnmGowaj+cRLe5TndJY97+JLBSFUZTemPx5rwdes2M2QzjM3Bw\r\nGt5gOuoLw1dFcySF7R8PVK7T8C/BxjOrroZX5ml8oF2lDjl1hxP91jM2kNls2BYK\r\npLMzSCHA1AX1aBB0VZqmzY2XVj4=\r\n", pcchString=0x43fc38) returned 1 [0094.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e318) returned 1 [0094.646] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa8) returned 0x117d8a8 [0094.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190dc0) returned 1 [0094.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e6f8) returned 1 [0094.646] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.647] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcc4 | out: pNumArgs=0x43fcc4) returned 0x4b4d58*="C:\\Windows\\MsMpEng.exe" [0094.647] LocalFree (hMem=0x4b4d58) returned 0x0 [0094.647] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcc0 | out: pNumArgs=0x43fcc0) returned 0x4b4fd8*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b4fd8) returned 0x0 [0094.648] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcbc | out: pNumArgs=0x43fcbc) returned 0x4b4d58*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b4d58) returned 0x0 [0094.648] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcb8 | out: pNumArgs=0x43fcb8) returned 0x4b4dd8*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b4dd8) returned 0x0 [0094.648] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcb4 | out: pNumArgs=0x43fcb4) returned 0x4b5318*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b5318) returned 0x0 [0094.648] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcec | out: pNumArgs=0x43fcec) returned 0x4b4fd8*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b4fd8) returned 0x0 [0094.648] GetCommandLineW () returned="\"C:\\Windows\\MsMpEng.exe\"" [0094.648] CommandLineToArgvW (in: lpCmdLine="\"C:\\Windows\\MsMpEng.exe\"", pNumArgs=0x43fcd4 | out: pNumArgs=0x43fcd4) returned 0x4b4e58*="C:\\Windows\\MsMpEng.exe" [0094.648] LocalFree (hMem=0x4b4e58) returned 0x0 [0094.648] GetUserDefaultUILanguage () returned 0x409 [0094.648] GetSystemDefaultUILanguage () returned 0x409 [0094.648] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1 [0094.650] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4) returned 0x117e160 [0094.650] GetKeyboardLayoutList (in: nBuff=1, lpList=0x117e160 | out: lpList=0x117e160) returned 1 [0094.650] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e160) returned 1 [0094.650] SHTestTokenMembership () returned 0x0 [0094.654] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\422BE415-4098-BB75-3BD9-3E62EE8E8423") returned 0x21c [0094.655] RtlGetLastWin32Error () returned 0x0 [0094.660] SHEmptyRecycleBinW (hwnd=0x0, pszRootPath=0x0, dwFlags=0x7) returned 0x8000ffff [0097.123] GetCurrentProcess () returned 0xffffffff [0097.123] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x8000) returned 1 [0097.123] SetThreadExecutionState (esFlags=0x80000001) returned 0x80000000 [0097.124] WinExec (lpCmdLine="netsh advfirewall firewall set rule group=\"Network Discovery\" new enable=Yes", uCmdShow=0x0) returned 0x21 [0097.332] RtlAdjustPrivilege (in: Privilege=0x14, NewValue=1, ForThread=1, OldValue=0x43fe6b | out: OldValue=0x43fe6b) returned 0xc000007c [0097.332] RtlAdjustPrivilege (in: Privilege=0x14, NewValue=1, ForThread=0, OldValue=0x43fe6b | out: OldValue=0x43fe6b) returned 0x0 [0097.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963fae, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x234 [0097.333] CloseHandle (hObject=0x234) returned 1 [0097.333] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName="ServicesActive", dwDesiredAccess=0x4) returned 0x4d6400 [0097.334] EnumServicesStatusExW (in: hSCManager=0x4d6400, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x43fe68, lpServicesReturned=0x43fe64, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x43fe68, lpServicesReturned=0x43fe64, lpResumeHandle=0x0) returned 0 [0097.336] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1cee) returned 0x1181950 [0097.336] EnumServicesStatusExW (in: hSCManager=0x4d6400, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x1181950, cbBufSize=0x1cee, pcbBytesNeeded=0x43fe68, lpServicesReturned=0x43fe64, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x1181950, pcbBytesNeeded=0x43fe68, lpServicesReturned=0x43fe64, lpResumeHandle=0x0) returned 1 [0097.337] OpenServiceW (hSCManager=0x4d6400, lpServiceName="clicktorunsvc", dwDesiredAccess=0x1002c) returned 0x4d6590 [0097.338] GetTickCount () returned 0x1f466d8 [0097.339] EnumDependentServicesW (in: hService=0x4d6590, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x43fe08, lpServicesReturned=0x43fe04 | out: lpServices=0x0, pcbBytesNeeded=0x43fe08, lpServicesReturned=0x43fe04) returned 1 [0097.339] ControlService (in: hService=0x4d6590, dwControl=0x1, lpServiceStatus=0x43fe28 | out: lpServiceStatus=0x43fe28*(dwServiceType=0x10, dwCurrentState=0x3, dwControlsAccepted=0x85, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x1, dwWaitHint=0x0)) returned 1 [0113.351] DeleteService (hService=0x4d6590) returned 1 [0113.359] CloseServiceHandle (hSCObject=0x4d6590) returned 1 [0113.359] OpenServiceW (hSCManager=0x4d6400, lpServiceName="clipsvc", dwDesiredAccess=0x1002c) returned 0x4eead8 [0113.359] GetTickCount () returned 0x1f4a567 [0113.359] EnumDependentServicesW (in: hService=0x4eead8, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x43fe08, lpServicesReturned=0x43fe04 | out: lpServices=0x0, pcbBytesNeeded=0x43fe08, lpServicesReturned=0x43fe04) returned 1 [0113.360] ControlService (in: hService=0x4eead8, dwControl=0x1, lpServiceStatus=0x43fe28 | out: lpServiceStatus=0x43fe28*(dwServiceType=0x20, dwCurrentState=0x3, dwControlsAccepted=0x0, dwWin32ExitCode=0x0, dwServiceSpecificExitCode=0x0, dwCheckPoint=0x1, dwWaitHint=0x4e20)) returned 1 [0113.942] DeleteService (hService=0x4eead8) returned 0 [0113.942] CloseServiceHandle (hSCObject=0x4eead8) returned 1 [0113.943] CloseServiceHandle (hSCObject=0x4d6400) returned 1 [0113.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3a8 [0113.957] Process32FirstW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.958] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x85, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0113.959] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0113.960] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.961] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0113.962] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0113.963] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0113.964] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0113.965] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0113.966] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.967] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x288, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.968] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1f0, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0113.969] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.970] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.973] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.974] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.975] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.976] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.977] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.978] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0113.979] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.980] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x3e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0113.981] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0113.982] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.983] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x29, th32ParentProcessID=0x654, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0113.984] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0113.985] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0113.986] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0113.987] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0113.988] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0113.989] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x93c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.990] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd10, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.991] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0113.992] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf80, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0113.993] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.994] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.995] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0113.997] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd7c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0113.998] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x314, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0113.999] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x290, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.000] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0114.001] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x290, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0114.002] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="manager.exe")) returned 1 [0114.003] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="long.exe")) returned 1 [0114.004] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe48, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="voteaskbox.exe")) returned 1 [0114.006] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x71c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="wonder strategy.exe")) returned 1 [0114.007] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="majority store behavior.exe")) returned 1 [0114.008] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x524, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="wonderstore.exe")) returned 1 [0114.009] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbdc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="soldier.exe")) returned 1 [0114.010] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbc4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="you.exe")) returned 1 [0114.011] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x94c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-ask-their.exe")) returned 1 [0114.012] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xad0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="population.exe")) returned 1 [0114.013] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x464, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="know_push_government.exe")) returned 1 [0114.014] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc34, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="manage.exe")) returned 1 [0114.015] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="seem.exe")) returned 1 [0114.016] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="offer education.exe")) returned 1 [0114.017] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc08, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="patient_culture_mr.exe")) returned 1 [0114.018] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="vote_why.exe")) returned 1 [0114.019] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x418, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0114.020] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x68c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0114.022] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0114.023] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0114.024] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0114.026] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0114.027] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0114.029] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0114.030] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0114.032] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1064, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0114.033] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x106c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0114.034] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0114.036] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0114.037] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0114.038] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0114.040] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0114.041] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0114.042] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x10d8) returned 0x3b0 [0114.042] TerminateProcess (hProcess=0x3b0, uExitCode=0x0) returned 1 [0114.049] CloseHandle (hObject=0x3b0) returned 1 [0114.049] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0114.051] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0114.052] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0114.054] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0114.055] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1150, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0114.057] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0114.058] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x1158) returned 0x3b0 [0114.058] TerminateProcess (hProcess=0x3b0, uExitCode=0x0) returned 1 [0114.059] CloseHandle (hObject=0x3b0) returned 1 [0114.059] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0114.060] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0114.061] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1180, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0114.062] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0114.063] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0114.065] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0114.066] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0114.067] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0114.068] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0114.069] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0114.070] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0114.072] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0114.073] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0114.074] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0114.075] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0114.076] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1228, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0114.077] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0114.078] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1248, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0114.079] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0114.080] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x125c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0114.081] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="blue green fight.exe")) returned 1 [0114.082] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="movement-machine.exe")) returned 1 [0114.083] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="most-on-set.exe")) returned 1 [0114.085] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="right sound.exe")) returned 1 [0114.085] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x674, pcPriClassBase=8, dwFlags=0x0, szExeFile="investment-respond.exe")) returned 1 [0114.086] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x131c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0114.087] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x150, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0114.088] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x734, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3e4, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0114.089] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x137c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x36c, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0114.090] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0xf14, pcPriClassBase=10, dwFlags=0x0, szExeFile="MsMpEng.exe")) returned 1 [0114.091] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xed4, pcPriClassBase=8, dwFlags=0x0, szExeFile="netsh.exe")) returned 1 [0114.092] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xb0, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0114.094] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="unsecapp.exe")) returned 1 [0114.095] Process32NextW (in: hSnapshot=0x3a8, lppe=0x43fc38 | out: lppe=0x43fc38*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="unsecapp")) returned 0 [0114.095] CloseHandle (hObject=0x3a8) returned 1 [0114.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x962bb5, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8 [0114.096] CloseHandle (hObject=0x3a8) returned 1 [0114.096] RtlAdjustPrivilege (in: Privilege=0x9, NewValue=1, ForThread=1, OldValue=0x43fe6b | out: OldValue=0x43fe6b) returned 0xc000007c [0114.096] RtlAdjustPrivilege (in: Privilege=0x9, NewValue=1, ForThread=0, OldValue=0x43fe6b | out: OldValue=0x43fe6b) returned 0x0 [0114.096] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x37d0000 [0114.107] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0114.107] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.108] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.109] CloseHandle (hObject=0x3b0) returned 1 [0114.109] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.109] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.111] CloseHandle (hObject=0x3b0) returned 1 [0114.111] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.111] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.112] CloseHandle (hObject=0x3b0) returned 1 [0114.112] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.113] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.113] CloseHandle (hObject=0x3b0) returned 1 [0114.113] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.114] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.115] CloseHandle (hObject=0x3b0) returned 1 [0114.115] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.115] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.116] CloseHandle (hObject=0x3b0) returned 1 [0114.116] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.117] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.121] CloseHandle (hObject=0x3b0) returned 1 [0114.121] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x963b70, lpParameter=0x43fe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0 [0114.122] SetThreadPriority (hThread=0x3b0, nPriority=2) returned 1 [0114.123] CloseHandle (hObject=0x3b0) returned 1 [0114.123] GetSystemInfo (in: lpSystemInfo=0x43fdb0 | out: lpSystemInfo=0x43fdb0*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.123] GetDriveTypeW (lpRootPathName="\\\\?\\A:\\") returned 0x1 [0114.123] GetDriveTypeW (lpRootPathName="\\\\?\\B:\\") returned 0x1 [0114.123] GetDriveTypeW (lpRootPathName="\\\\?\\C:\\") returned 0x3 [0114.124] NetShareAdd (in: servername=0x0, level=0x2, buf=0x43fdd0*(shi2_netname="C", shi2_type=0x0, shi2_remark="Share added by R", shi2_permissions=0x7f, shi2_max_uses=0xffffffff, shi2_current_uses=0x0, shi2_path="C:\\", shi2_passwd=0x0), parm_err=0x43fe00 | out: buf=0x43fdd0*(shi2_netname="C", shi2_type=0x0, shi2_remark="Share added by R", shi2_permissions=0x7f, shi2_max_uses=0xffffffff, shi2_current_uses=0x0, shi2_path="C:\\", shi2_passwd=0x0), parm_err=0x43fe00) returned 0x0 [0123.791] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfffe) returned 0x1190bd0 [0123.793] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e240 [0123.794] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x10) returned 0x11860a0 [0123.795] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x16) returned 0x117d688 [0123.795] CreateFileW (lpFileName="\\\\?\\C:\\tmp" (normalized: "c:\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3b4 [0123.799] CloseHandle (hObject=0x3b4) returned 1 [0123.800] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d688) returned 1 [0123.801] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x36) returned 0x11fffa8 [0123.801] CreateFileW (lpFileName="\\\\?\\C:\\1yg4ztc5-readme.txt" (normalized: "c:\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b4 [0123.802] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffa8) returned 1 [0123.802] WriteFile (in: hFile=0x3b4, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.803] CloseHandle (hObject=0x3b4) returned 1 [0123.804] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11860a0) returned 1 [0123.804] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e240) returned 1 [0123.804] FindFirstFileExW (in: lpFileName="\\\\?\\C:\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0123.805] GetWindowsDirectoryW (in: lpBuffer=0x971070, uSize=0x104 | out: lpBuffer="C:\\Windows") returned 0xa [0123.805] PathAddBackslashW (in: pszPath="\\\\?\\C:\\Windows" | out: pszPath="\\\\?\\C:\\Windows\\") returned="" [0123.805] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8345f93a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8345f93a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83464781, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0x0, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.807] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x7898476d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78b27f82, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x43fae4, cFileName="Boot", cAlternateFileName="")) returned 1 [0123.807] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78ab5a49, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x61b64, dwReserved0=0x0, dwReserved1=0x43fae4, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0123.807] PathFindExtensionW (pszPath="bootmgr") returned="" [0123.807] CreateFileW (lpFileName="\\\\?\\c:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3b8 [0123.809] SetFilePointerEx (in: hFile=0x3b8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0123.809] ReadFile (in: hFile=0x3b8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0123.811] CloseHandle (hObject=0x3b8) returned 1 [0123.811] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x61cc4) returned 0x3b494a0 [0123.815] CreateFileW (lpFileName="\\\\?\\c:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0xffffffff [0123.815] RtlGetLastWin32Error () returned 0x5 [0123.815] GetCurrentProcess () returned 0xffffffff [0123.815] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x43f9a0 | out: TokenHandle=0x43f9a0*=0x3b8) returned 1 [0123.816] GetTokenInformation (in: TokenHandle=0x3b8, TokenInformationClass=0x1, TokenInformation=0x9733e4, TokenInformationLength=0x200, ReturnLength=0x43f99c | out: TokenInformation=0x9733e4, ReturnLength=0x43f99c) returned 1 [0123.816] CloseHandle (hObject=0x3b8) returned 1 [0123.816] SetNamedSecurityInfoW () returned 0x0 [0123.819] SetNamedSecurityInfoW () returned 0x0 [0123.821] GetFileAttributesW (lpFileName="\\\\?\\c:\\bootmgr" (normalized: "c:\\bootmgr")) returned 0x27 [0123.821] SetFileAttributesW (lpFileName="\\\\?\\c:\\bootmgr", dwFileAttributes=0x80) returned 1 [0123.821] CreateFileW (lpFileName="\\\\?\\c:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3b8 [0123.822] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1e) returned 0x11fffa8 [0123.843] CreateIoCompletionPort (FileHandle=0x3b8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0123.843] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b494a0) returned 1 [0123.845] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x78b27f82, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x2feb42d5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x43fae4, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0123.845] PathFindExtensionW (pszPath="bootnxt") returned="" [0123.845] CreateFileW (lpFileName="\\\\?\\c:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c0 [0123.845] CloseHandle (hObject=0x3c0) returned 1 [0123.845] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x161) returned 0x3bc85a8 [0123.845] CreateFileW (lpFileName="\\\\?\\c:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3c0 [0123.845] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1e) returned 0x117d958 [0123.847] CreateIoCompletionPort (FileHandle=0x3c0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0123.847] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc85a8) returned 1 [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0x78d17e5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x78d17e5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x78d17e5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x43fae4, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Documents and Settings", cAlternateFileName="")) returned 1 [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x551dbbfd, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x551dbbfd, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0xceb4f72b, ftLastWriteTime.dwHighDateTime=0x1d75d31, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0123.849] PathFindExtensionW (pszPath="hiberfil.sys") returned=".sys" [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x85890a37, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x85890a37, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcf601cdb, ftLastWriteTime.dwHighDateTime=0x1d75d31, nFileSizeHigh=0x0, nFileSizeLow=0x48000000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0123.849] PathFindExtensionW (pszPath="pagefile.sys") returned=".sys" [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbaec25, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xbaec25, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0123.849] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1e2b6b9d, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x1e2b6b9d, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Program Files", cAlternateFileName="")) returned 1 [0123.849] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e250 [0123.849] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x2c) returned 0x1183648 [0123.849] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x32) returned 0x1183680 [0123.849] CreateFileW (lpFileName="\\\\?\\c:\\program files\\tmp" (normalized: "c:\\program files\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.850] CloseHandle (hObject=0x3c8) returned 1 [0123.850] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183680) returned 1 [0123.850] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x52) returned 0x1183680 [0123.850] CreateFileW (lpFileName="\\\\?\\c:\\program files\\1yg4ztc5-readme.txt" (normalized: "c:\\program files\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.851] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183680) returned 1 [0123.851] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.852] CloseHandle (hObject=0x3c8) returned 1 [0123.852] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1b83b055, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b83b055, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Program Files (x86)", cAlternateFileName="")) returned 1 [0123.852] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e200 [0123.852] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x38) returned 0x1183680 [0123.852] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x11836c0 [0123.853] CreateFileW (lpFileName="\\\\?\\c:\\program files (x86)\\tmp" (normalized: "c:\\program files (x86)\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.853] CloseHandle (hObject=0x3c8) returned 1 [0123.853] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0123.853] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x11836c0 [0123.853] CreateFileW (lpFileName="\\\\?\\c:\\program files (x86)\\1yg4ztc5-readme.txt" (normalized: "c:\\program files (x86)\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.854] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0123.854] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.855] CloseHandle (hObject=0x3c8) returned 1 [0123.855] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ProgramData", cAlternateFileName="")) returned 1 [0123.855] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbadba904, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbadba904, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Recovery", cAlternateFileName="")) returned 1 [0123.855] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e150 [0123.855] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x22) returned 0x11836c0 [0123.855] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x28) returned 0x11836f0 [0123.855] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\tmp" (normalized: "c:\\recovery\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.864] CloseHandle (hObject=0x3c8) returned 1 [0123.864] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f0) returned 1 [0123.864] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x11836f0 [0123.864] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\1yg4ztc5-readme.txt" (normalized: "c:\\recovery\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.865] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f0) returned 1 [0123.865] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.866] CloseHandle (hObject=0x3c8) returned 1 [0123.866] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x858b6c65, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x858b6c65, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcf627e9d, ftLastWriteTime.dwHighDateTime=0x1d75d31, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0123.866] PathFindExtensionW (pszPath="swapfile.sys") returned=".sys" [0123.867] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x85289733, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2dbfc137, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x2dbfc137, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="System Volume Information", cAlternateFileName="")) returned 1 [0123.867] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Users", cAlternateFileName="")) returned 1 [0123.867] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e290 [0123.867] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x1c) returned 0x11836f0 [0123.867] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x22) returned 0x1183718 [0123.867] CreateFileW (lpFileName="\\\\?\\c:\\users\\tmp" (normalized: "c:\\users\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.868] CloseHandle (hObject=0x3c8) returned 1 [0123.868] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183718) returned 1 [0123.868] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x1183718 [0123.868] CreateFileW (lpFileName="\\\\?\\c:\\users\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.868] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183718) returned 1 [0123.868] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.869] CloseHandle (hObject=0x3c8) returned 1 [0123.869] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5f0a4ae8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x5f0a4ae8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows", cAlternateFileName="")) returned 1 [0123.869] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5f0a4ae8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x5f0a4ae8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="windows", cAlternateFileName="")) returned 0 [0123.869] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0123.871] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0123.871] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e250) returned 1 [0123.871] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\program files\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0123.871] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1e2b6b9d, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x834d730f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834d730f, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x834d730f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x834da7ab, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Common Files", cAlternateFileName="")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2f72013, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9701bb02, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9701bb02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x15c6ea85, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x15c6ea85, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b3095dc, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x14d5badf, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14d5badf, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Microsoft Office 15", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde5c2433, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x14a148a2, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14a148a2, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde5c2433, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x152defcc, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152defcc, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf22b9950, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x14e40921, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14e40921, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Uninstall Information", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x14d3595a, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14d3595a, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ebef3a1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x149ee622, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x149ee622, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Journal", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x14d3595a, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14d3595a, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x152defcc, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152defcc, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Multimedia Platform", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x152b8c3b, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152b8c3b, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x14d81e59, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14d81e59, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2224dfa5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2224dfa5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="WindowsApps", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc47584, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xc47584, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="WindowsPowerShell", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc47584, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc47584, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xc47584, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="windowspowershell", cAlternateFileName="")) returned 0 [0123.873] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0123.874] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183680) returned 1 [0123.874] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0123.874] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\program files (x86)\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0123.875] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x1b83b055, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x834de846, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834de846, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x834de846, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x834e0f72, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x14d3595a, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14d3595a, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Common Files", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x152b8c3b, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152b8c3b, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Internet Explorer", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83b055, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x152defcc, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152defcc, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Microsoft Office", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x15c6ea85, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x15c6ea85, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Microsoft.NET", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde6b7421, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x152b8c3b, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152b8c3b, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde6dd69d, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x14bb827b, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14bb827b, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Reference Assemblies", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd2a0ad1, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd2a0ad1, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Defender", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x14e1a75d, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14e1a75d, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Mail", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd2c6d39, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd2c6d39, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Media Player", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x15c6ea85, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x15c6ea85, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Multimedia Platform", cAlternateFileName="")) returned 1 [0123.876] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x15c6ea85, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x15c6ea85, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows NT", cAlternateFileName="")) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x15c6ea85, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x15c6ea85, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Photo Viewer", cAlternateFileName="")) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x14c04656, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14c04656, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Portable Devices", cAlternateFileName="")) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x152defcc, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x152defcc, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Windows Sidebar", cAlternateFileName="")) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="WindowsPowerShell", cAlternateFileName="")) returned 1 [0123.877] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x154fc968, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x154fc968, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="windowspowershell", cAlternateFileName="")) returned 0 [0123.877] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0123.878] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0123.878] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e150) returned 1 [0123.878] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\recovery\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0123.878] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x834f6f09, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x834f960a, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f960a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x834f960a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x834fe472, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5feba6e9, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5feba6e9, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="WindowsRE", cAlternateFileName="")) returned 1 [0123.879] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1b0 [0123.879] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x36) returned 0x1183648 [0123.879] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3c) returned 0x1183688 [0123.880] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\tmp" (normalized: "c:\\recovery\\windowsre\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.880] CloseHandle (hObject=0x3c8) returned 1 [0123.880] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183688) returned 1 [0123.880] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x1183688 [0123.881] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\1yg4ztc5-readme.txt" (normalized: "c:\\recovery\\windowsre\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.881] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183688) returned 1 [0123.881] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.882] CloseHandle (hObject=0x3c8) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5feba6e9, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5feba6e9, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="windowsre", cAlternateFileName="")) returned 0 [0123.882] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0123.883] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f0) returned 1 [0123.883] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e290) returned 1 [0123.883] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0123.883] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x83500b33, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83500b33, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83500b33, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83503246, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x43fae4, cFileName="All Users", cAlternateFileName="")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x43fae4, cFileName="Default", cAlternateFileName="")) returned 1 [0123.884] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e210 [0123.885] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x2c) returned 0x1183688 [0123.885] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x32) returned 0x11836c0 [0123.885] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\tmp" (normalized: "c:\\users\\default\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.887] CloseHandle (hObject=0x3c8) returned 1 [0123.887] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0123.887] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x52) returned 0x11836c0 [0123.887] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.888] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0123.888] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.889] CloseHandle (hObject=0x3c8) returned 1 [0123.889] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Default User", cAlternateFileName="")) returned 1 [0123.889] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Public", cAlternateFileName="")) returned 1 [0123.890] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2b0 [0123.890] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x2a) returned 0x11836c0 [0123.890] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x30) returned 0x11836f8 [0123.890] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\tmp" (normalized: "c:\\users\\public\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.890] CloseHandle (hObject=0x3c8) returned 1 [0123.891] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f8) returned 1 [0123.891] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x50) returned 0x11836f8 [0123.891] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.894] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f8) returned 1 [0123.894] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.895] CloseHandle (hObject=0x3c8) returned 1 [0123.896] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="RDhJ0CNFevzX", cAlternateFileName="")) returned 1 [0123.896] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2c0 [0123.896] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x36) returned 0x11836f8 [0123.896] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3c) returned 0x1183738 [0123.896] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3c8 [0123.897] CloseHandle (hObject=0x3c8) returned 1 [0123.897] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183738) returned 1 [0123.897] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x1183738 [0123.897] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.898] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183738) returned 1 [0123.898] WriteFile (in: hFile=0x3c8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0123.899] CloseHandle (hObject=0x3c8) returned 1 [0123.899] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rdhj0cnfevzx", cAlternateFileName="")) returned 0 [0123.899] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0123.900] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0123.900] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1b0) returned 1 [0123.900] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\recovery\\windowsre\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0123.900] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x83520730, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83520730, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0123.902] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83520730, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83520730, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83522ea0, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0123.902] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xbaa998b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbaa998b0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x136e0f4d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="boot.sdi", cAlternateFileName="")) returned 1 [0123.902] PathFindExtensionW (pszPath="boot.sdi") returned=".sdi" [0123.902] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\boot.sdi" (normalized: "c:\\recovery\\windowsre\\boot.sdi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3c8 [0123.902] SetFilePointerEx (in: hFile=0x3c8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0123.902] ReadFile (in: hFile=0x3c8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0123.904] CloseHandle (hObject=0x3c8) returned 1 [0123.904] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x100160) returned 0x3e6d020 [0123.908] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\boot.sdi" (normalized: "c:\\recovery\\windowsre\\boot.sdi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3c8 [0123.909] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x46) returned 0x1183738 [0123.910] CreateIoCompletionPort (FileHandle=0x3c8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0123.910] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3e6d020) returned 1 [0123.921] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xbadba904, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5feba6e9, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5feba6e9, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ReAgent.xml", cAlternateFileName="")) returned 1 [0123.922] PathFindExtensionW (pszPath="reagent.xml") returned=".xml" [0123.922] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\ReAgent.xml" (normalized: "c:\\recovery\\windowsre\\reagent.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc [0123.922] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0123.922] ReadFile (in: hFile=0x3cc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0123.924] CloseHandle (hObject=0x3cc) returned 1 [0123.924] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x575) returned 0x3bc8718 [0123.924] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\ReAgent.xml" (normalized: "c:\\recovery\\windowsre\\reagent.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3cc [0123.924] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4c) returned 0x1183788 [0123.926] CreateIoCompletionPort (FileHandle=0x3cc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0123.927] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0123.934] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xe1aeb488, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xe1aeb488, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x1f0b6c28, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x11b68298, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Winre.wim", cAlternateFileName="")) returned 1 [0123.934] PathFindExtensionW (pszPath="winre.wim") returned=".wim" [0123.934] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\Winre.wim" (normalized: "c:\\recovery\\windowsre\\winre.wim"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc [0123.994] SetFilePointerEx (in: hFile=0x3cc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0123.995] ReadFile (in: hFile=0x3cc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.000] CloseHandle (hObject=0x3cc) returned 1 [0124.000] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x100160) returned 0x3f74020 [0124.006] CreateFileW (lpFileName="\\\\?\\c:\\recovery\\windowsre\\Winre.wim" (normalized: "c:\\recovery\\windowsre\\winre.wim"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3cc [0124.007] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183788 [0124.008] CreateIoCompletionPort (FileHandle=0x3cc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.009] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3f74020) returned 1 [0124.020] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xe1aeb488, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xe1aeb488, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x1f0b6c28, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x11b68298, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="winre.wim", cAlternateFileName="")) returned 0 [0124.020] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.021] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183688) returned 1 [0124.021] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e210) returned 1 [0124.021] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.021] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x83531924, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.023] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83531924, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83531924, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x835366dd, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.023] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.023] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d54d8a8, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d54d8a8, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d54d8a8, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Application Data", cAlternateFileName="")) returned 1 [0124.023] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.023] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.023] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e160 [0124.023] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3c) returned 0x1183648 [0124.023] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x11837d8 [0124.023] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\desktop\\tmp" (normalized: "c:\\users\\default\\desktop\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.024] CloseHandle (hObject=0x3d0) returned 1 [0124.026] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.026] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x11837d8 [0124.026] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\desktop\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\desktop\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.027] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.027] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.028] CloseHandle (hObject=0x3d0) returned 1 [0124.029] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Documents", cAlternateFileName="")) returned 1 [0124.029] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e210 [0124.029] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x40) returned 0x11837d8 [0124.029] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x46) returned 0x1183820 [0124.029] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\documents\\tmp" (normalized: "c:\\users\\default\\documents\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.032] CloseHandle (hObject=0x3d0) returned 1 [0124.032] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183820) returned 1 [0124.032] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183820 [0124.032] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\documents\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\documents\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.033] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183820) returned 1 [0124.033] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.034] CloseHandle (hObject=0x3d0) returned 1 [0124.034] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Downloads", cAlternateFileName="")) returned 1 [0124.040] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e220 [0124.040] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x40) returned 0x1183820 [0124.040] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x46) returned 0x1183868 [0124.040] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\downloads\\tmp" (normalized: "c:\\users\\default\\downloads\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.041] CloseHandle (hObject=0x3d0) returned 1 [0124.041] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183868) returned 1 [0124.041] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183868 [0124.041] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\downloads\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\downloads\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.042] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183868) returned 1 [0124.042] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.043] CloseHandle (hObject=0x3d0) returned 1 [0124.043] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Favorites", cAlternateFileName="")) returned 1 [0124.044] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e170 [0124.044] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x40) returned 0x1183868 [0124.044] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x46) returned 0x11838b0 [0124.044] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\favorites\\tmp" (normalized: "c:\\users\\default\\favorites\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.044] CloseHandle (hObject=0x3d0) returned 1 [0124.046] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838b0) returned 1 [0124.046] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x11838b0 [0124.046] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\favorites\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\favorites\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.046] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838b0) returned 1 [0124.047] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.048] CloseHandle (hObject=0x3d0) returned 1 [0124.048] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Links", cAlternateFileName="")) returned 1 [0124.048] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e270 [0124.048] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x38) returned 0x11838b0 [0124.049] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x11838f0 [0124.049] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\links\\tmp" (normalized: "c:\\users\\default\\links\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.050] CloseHandle (hObject=0x3d0) returned 1 [0124.050] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838f0) returned 1 [0124.050] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x11838f0 [0124.050] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\links\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\links\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.051] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838f0) returned 1 [0124.051] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.052] CloseHandle (hObject=0x3d0) returned 1 [0124.052] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0124.053] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Music", cAlternateFileName="")) returned 1 [0124.053] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e150 [0124.053] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x38) returned 0x11838f0 [0124.053] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183930 [0124.053] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\music\\tmp" (normalized: "c:\\users\\default\\music\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.053] CloseHandle (hObject=0x3d0) returned 1 [0124.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183930) returned 1 [0124.054] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183930 [0124.054] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\music\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\music\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.054] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183930) returned 1 [0124.054] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.056] CloseHandle (hObject=0x3d0) returned 1 [0124.056] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Documents", cAlternateFileName="")) returned 1 [0124.056] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.056] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.056] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="")) returned 1 [0124.056] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="")) returned 1 [0124.057] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="")) returned 1 [0124.057] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0124.057] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d61ae52, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d61ae52, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0124.057] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.057] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e180 [0124.057] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183930 [0124.057] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183978 [0124.057] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\pictures\\tmp" (normalized: "c:\\users\\default\\pictures\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.058] CloseHandle (hObject=0x3d0) returned 1 [0124.059] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183978) returned 1 [0124.059] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183978 [0124.059] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\pictures\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\pictures\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.059] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183978) returned 1 [0124.059] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.061] CloseHandle (hObject=0x3d0) returned 1 [0124.061] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0124.061] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.061] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0124.061] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e190 [0124.061] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183978 [0124.061] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x11839c8 [0124.061] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\saved games\\tmp" (normalized: "c:\\users\\default\\saved games\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.062] CloseHandle (hObject=0x3d0) returned 1 [0124.062] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839c8) returned 1 [0124.062] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x11839c8 [0124.062] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\saved games\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\saved games\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.063] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839c8) returned 1 [0124.063] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.064] CloseHandle (hObject=0x3d0) returned 1 [0124.065] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.065] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0124.065] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Templates", cAlternateFileName="")) returned 1 [0124.065] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.065] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1a0 [0124.065] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3a) returned 0x11839c8 [0124.065] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x40) returned 0x1183a10 [0124.065] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\videos\\tmp" (normalized: "c:\\users\\default\\videos\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.066] CloseHandle (hObject=0x3d0) returned 1 [0124.066] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0124.066] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183a10 [0124.066] CreateFileW (lpFileName="\\\\?\\c:\\users\\default\\videos\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\default\\videos\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.067] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0124.067] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.069] CloseHandle (hObject=0x3d0) returned 1 [0124.069] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="videos", cAlternateFileName="")) returned 0 [0124.069] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.070] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836c0) returned 1 [0124.070] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2b0) returned 1 [0124.070] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.070] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8353dbd8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.072] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83538dc9, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83538dc9, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83545387, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.072] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="AccountPictures", cAlternateFileName="")) returned 1 [0124.072] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e200 [0124.072] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x1183690 [0124.072] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x50) returned 0x1183a10 [0124.072] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\accountpictures\\tmp" (normalized: "c:\\users\\public\\accountpictures\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.073] CloseHandle (hObject=0x3d0) returned 1 [0124.073] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0124.073] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183a10 [0124.074] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\accountpictures\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\accountpictures\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.074] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0124.074] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.075] CloseHandle (hObject=0x3d0) returned 1 [0124.076] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e290 [0124.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3a) returned 0x1183a10 [0124.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x40) returned 0x1183a58 [0124.076] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\desktop\\tmp" (normalized: "c:\\users\\public\\desktop\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.078] CloseHandle (hObject=0x3d0) returned 1 [0124.078] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a58) returned 1 [0124.078] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183a58 [0124.078] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\desktop\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\desktop\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.079] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a58) returned 1 [0124.079] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.080] CloseHandle (hObject=0x3d0) returned 1 [0124.081] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.081] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Documents", cAlternateFileName="")) returned 1 [0124.081] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e230 [0124.081] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183a58 [0124.081] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183aa0 [0124.081] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\documents\\tmp" (normalized: "c:\\users\\public\\documents\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.083] CloseHandle (hObject=0x3d0) returned 1 [0124.083] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa0) returned 1 [0124.084] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183aa0 [0124.084] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\documents\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\documents\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.084] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa0) returned 1 [0124.084] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.085] CloseHandle (hObject=0x3d0) returned 1 [0124.086] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Downloads", cAlternateFileName="")) returned 1 [0124.086] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e250 [0124.086] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183aa0 [0124.086] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183ae8 [0124.086] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\downloads\\tmp" (normalized: "c:\\users\\public\\downloads\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.086] CloseHandle (hObject=0x3d0) returned 1 [0124.087] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ae8) returned 1 [0124.087] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183ae8 [0124.087] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\downloads\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\downloads\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.087] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ae8) returned 1 [0124.087] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.089] CloseHandle (hObject=0x3d0) returned 1 [0124.089] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Libraries", cAlternateFileName="")) returned 1 [0124.089] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e240 [0124.089] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183ae8 [0124.091] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183b30 [0124.091] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\libraries\\tmp" (normalized: "c:\\users\\public\\libraries\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.092] CloseHandle (hObject=0x3d0) returned 1 [0124.092] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b30) returned 1 [0124.092] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183b30 [0124.092] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\libraries\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\libraries\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.095] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b30) returned 1 [0124.095] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.097] CloseHandle (hObject=0x3d0) returned 1 [0124.097] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Music", cAlternateFileName="")) returned 1 [0124.097] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1c0 [0124.097] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x36) returned 0x1183b30 [0124.097] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3c) returned 0x1183b70 [0124.097] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\music\\tmp" (normalized: "c:\\users\\public\\music\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.098] CloseHandle (hObject=0x3d0) returned 1 [0124.098] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b70) returned 1 [0124.098] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x1183b70 [0124.098] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\music\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\music\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.099] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b70) returned 1 [0124.099] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.100] CloseHandle (hObject=0x3d0) returned 1 [0124.101] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.101] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1b0 [0124.101] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3c) returned 0x1183b70 [0124.101] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x1183bb8 [0124.101] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\pictures\\tmp" (normalized: "c:\\users\\public\\pictures\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.101] CloseHandle (hObject=0x3d0) returned 1 [0124.102] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bb8) returned 1 [0124.102] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x1183bb8 [0124.102] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\pictures\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\pictures\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.102] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bb8) returned 1 [0124.102] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.103] CloseHandle (hObject=0x3d0) returned 1 [0124.104] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.104] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e140 [0124.104] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x38) returned 0x1183bb8 [0124.104] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x3e) returned 0x1183bf8 [0124.104] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\videos\\tmp" (normalized: "c:\\users\\public\\videos\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.105] CloseHandle (hObject=0x3d0) returned 1 [0124.105] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0124.105] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183bf8 [0124.105] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\videos\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\public\\videos\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.106] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0124.106] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.107] CloseHandle (hObject=0x3d0) returned 1 [0124.107] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="videos", cAlternateFileName="")) returned 0 [0124.107] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.108] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836f8) returned 1 [0124.108] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2c0) returned 1 [0124.108] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.108] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83549f65, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.110] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83549f65, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83549f65, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8354c61e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.110] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="AppData", cAlternateFileName="")) returned 1 [0124.110] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Application Data", cAlternateFileName="")) returned 1 [0124.110] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Contacts", cAlternateFileName="")) returned 1 [0124.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1d0 [0124.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x11836e8 [0124.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183bf8 [0124.110] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\contacts\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.111] CloseHandle (hObject=0x3d0) returned 1 [0124.111] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0124.112] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183bf8 [0124.112] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\contacts\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.113] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0124.113] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.114] CloseHandle (hObject=0x3d0) returned 1 [0124.114] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Cookies", cAlternateFileName="")) returned 1 [0124.114] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x575be772, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x575be772, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Desktop", cAlternateFileName="")) returned 1 [0124.115] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1e0 [0124.115] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x46) returned 0x1183bf8 [0124.115] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4c) returned 0x1183c48 [0124.115] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.115] CloseHandle (hObject=0x3d0) returned 1 [0124.116] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c48) returned 1 [0124.116] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183c48 [0124.116] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.116] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c48) returned 1 [0124.116] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.118] CloseHandle (hObject=0x3d0) returned 1 [0124.118] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x14634ace, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x14634ace, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Documents", cAlternateFileName="")) returned 1 [0124.118] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e260 [0124.118] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x1183c48 [0124.118] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x50) returned 0x1183ca0 [0124.118] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.119] CloseHandle (hObject=0x3d0) returned 1 [0124.119] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ca0) returned 1 [0124.119] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183ca0 [0124.119] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.120] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ca0) returned 1 [0124.120] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.121] CloseHandle (hObject=0x3d0) returned 1 [0124.122] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Downloads", cAlternateFileName="")) returned 1 [0124.122] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2b0 [0124.122] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x1183ca0 [0124.122] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x50) returned 0x1183cf8 [0124.123] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\downloads\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.123] CloseHandle (hObject=0x3d0) returned 1 [0124.124] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cf8) returned 1 [0124.124] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183cf8 [0124.124] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\downloads\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.124] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cf8) returned 1 [0124.124] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.125] CloseHandle (hObject=0x3d0) returned 1 [0124.126] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Favorites", cAlternateFileName="")) returned 1 [0124.126] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1f0 [0124.126] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x1183cf8 [0124.126] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x50) returned 0x1183d50 [0124.126] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.127] CloseHandle (hObject=0x3d0) returned 1 [0124.127] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d50) returned 1 [0124.127] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183d50 [0124.127] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.128] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d50) returned 1 [0124.128] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.129] CloseHandle (hObject=0x3d0) returned 1 [0124.129] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Links", cAlternateFileName="")) returned 1 [0124.130] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e280 [0124.130] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x1183d50 [0124.130] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183da0 [0124.130] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\links\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.130] CloseHandle (hObject=0x3d0) returned 1 [0124.131] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183da0) returned 1 [0124.131] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x1183da0 [0124.131] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\links\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.131] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183da0) returned 1 [0124.131] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.132] CloseHandle (hObject=0x3d0) returned 1 [0124.132] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Local Settings", cAlternateFileName="")) returned 1 [0124.132] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x140d75af, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x140d75af, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Music", cAlternateFileName="")) returned 1 [0124.133] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2a0 [0124.133] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x42) returned 0x1183da0 [0124.133] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183df0 [0124.133] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.134] CloseHandle (hObject=0x3d0) returned 1 [0124.134] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df0) returned 1 [0124.134] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x1183df0 [0124.134] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.135] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df0) returned 1 [0124.135] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.136] CloseHandle (hObject=0x3d0) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Documents", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NetHood", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe3c63021, ftLastAccessTime.dwHighDateTime=0x1d75d21, ftLastWriteTime.dwLowDateTime=0xe3c63021, ftLastWriteTime.dwHighDateTime=0x1d75d21, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x58000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ntuser.dat.LOG1", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ntuser.dat.LOG2", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="")) returned 1 [0124.136] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0124.137] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0124.137] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2e0 [0124.137] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183df0 [0124.137] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183e40 [0124.137] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\onedrive\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.137] CloseHandle (hObject=0x3d0) returned 1 [0124.138] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e40) returned 1 [0124.138] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183e40 [0124.138] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\onedrive\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.138] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e40) returned 1 [0124.138] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.139] CloseHandle (hObject=0x3d0) returned 1 [0124.139] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1454fd1e, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x1454fd1e, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Pictures", cAlternateFileName="")) returned 1 [0124.139] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2c0 [0124.139] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183e40 [0124.139] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183e90 [0124.139] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.140] CloseHandle (hObject=0x3d0) returned 1 [0124.140] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e90) returned 1 [0124.140] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183e90 [0124.140] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.140] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e90) returned 1 [0124.140] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.141] CloseHandle (hObject=0x3d0) returned 1 [0124.141] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="PrintHood", cAlternateFileName="")) returned 1 [0124.141] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Recent", cAlternateFileName="")) returned 1 [0124.141] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Saved Games", cAlternateFileName="")) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2f0 [0124.142] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183e90 [0124.142] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x54) returned 0x1183ee8 [0124.142] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\saved games\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.142] CloseHandle (hObject=0x3d0) returned 1 [0124.142] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ee8) returned 1 [0124.142] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183ee8 [0124.142] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\saved games\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.143] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ee8) returned 1 [0124.143] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.144] CloseHandle (hObject=0x3d0) returned 1 [0124.144] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Searches", cAlternateFileName="")) returned 1 [0124.144] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2d0 [0124.145] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x48) returned 0x1183ee8 [0124.145] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183f38 [0124.145] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.150] CloseHandle (hObject=0x3d0) returned 1 [0124.150] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183f38) returned 1 [0124.150] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183f38 [0124.150] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.151] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183f38) returned 1 [0124.151] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.164] CloseHandle (hObject=0x3d0) returned 1 [0124.164] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SendTo", cAlternateFileName="")) returned 1 [0124.164] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Start Menu", cAlternateFileName="")) returned 1 [0124.164] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Templates", cAlternateFileName="")) returned 1 [0124.164] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1459c1e0, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x1459c1e0, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Videos", cAlternateFileName="")) returned 1 [0124.164] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e300 [0124.164] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x44) returned 0x1183f38 [0124.164] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4a) returned 0x1183f88 [0124.164] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.165] CloseHandle (hObject=0x3d0) returned 1 [0124.166] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183f88) returned 1 [0124.166] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x1183f88 [0124.166] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.166] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183f88) returned 1 [0124.166] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.167] CloseHandle (hObject=0x3d0) returned 1 [0124.168] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1459c1e0, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x1459c1e0, ftLastWriteTime.dwHighDateTime=0x1d75d32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="videos", cAlternateFileName="")) returned 0 [0124.168] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.169] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.169] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e160) returned 1 [0124.169] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.169] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836804dc, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836827d2, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.170] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836827d2, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836827d2, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83684f8d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.170] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836827d2, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836827d2, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83684f8d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.170] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.171] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.171] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e210) returned 1 [0124.171] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\documents\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.171] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x836938fc, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.172] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836938fc, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836938fc, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83698689, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.173] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Music", cAlternateFileName="")) returned 1 [0124.173] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0124.173] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Videos", cAlternateFileName="")) returned 1 [0124.173] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Videos", cAlternateFileName="")) returned 0 [0124.173] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.174] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183820) returned 1 [0124.174] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e220) returned 1 [0124.174] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.174] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836a70ad, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836a987d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.175] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836a987d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836a987d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836ae76f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.175] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836a987d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836a987d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836ae76f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.176] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.176] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183868) returned 1 [0124.176] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e170) returned 1 [0124.176] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.177] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836b1071, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836b4c3a, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.178] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836b4c3a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836b4c3a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836b826c, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.178] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836b4c3a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836b4c3a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836b826c, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.178] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.179] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838b0) returned 1 [0124.179] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e270) returned 1 [0124.179] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\links\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.179] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836bd073, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836bf848, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.181] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836bf848, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836bf848, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836c2110, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.181] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836bf848, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836bf848, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836c2110, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.181] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.182] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838f0) returned 1 [0124.182] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e150) returned 1 [0124.182] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\music\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.182] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836c6fa8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836c6fa8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.183] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836c6fa8, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836c6fa8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836cbe3e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.183] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836c6fa8, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836c6fa8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836cbe3e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.184] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.184] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183930) returned 1 [0124.184] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e180) returned 1 [0124.184] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.185] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836d317d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836d317d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.186] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836d317d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836d317d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836d7ec1, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.186] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836d317d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836d317d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836d7ec1, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.186] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.186] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183978) returned 1 [0124.186] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e190) returned 1 [0124.186] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\saved games\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.187] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836da78e, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836dccab, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.188] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836dccab, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836dccab, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836e1aaa, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.188] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836dccab, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836dccab, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836e1aaa, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.188] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.188] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839c8) returned 1 [0124.188] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1a0) returned 1 [0124.188] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\default\\videos\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.189] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x836e4331, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836e69b8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.189] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836e69b8, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836e69b8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836eb826, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.190] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836e69b8, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836e69b8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836eb826, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0124.190] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.190] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183690) returned 1 [0124.190] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0124.190] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\accountpictures\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.191] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x836f53e7, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836f7ac2, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836f7ac2, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x836f7ac2, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x836fc895, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.192] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.192] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.192] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0124.192] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e290) returned 1 [0124.193] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.193] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x83703ef3, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.194] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83703ef3, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83703ef3, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83708bb3, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.194] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.194] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.194] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.197] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a58) returned 1 [0124.197] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e230) returned 1 [0124.197] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\documents\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.197] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x83710270, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83710270, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83710270, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83714f95, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Music", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Videos", cAlternateFileName="")) returned 1 [0124.198] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Videos", cAlternateFileName="")) returned 0 [0124.198] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.199] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa0) returned 1 [0124.199] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e250) returned 1 [0124.199] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.199] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x83717771, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83717771, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.201] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83717771, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83717771, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8371c421, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.201] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.201] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.201] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.202] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ae8) returned 1 [0124.202] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e240) returned 1 [0124.202] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\libraries\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.202] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x83723a48, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83728771, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.204] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83726042, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83726042, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8372fcb1, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.204] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.205] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="RecordedTV.library-ms", cAlternateFileName="")) returned 1 [0124.205] PathFindExtensionW (pszPath="recordedtv.library-ms") returned=".library-ms" [0124.205] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.211] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.211] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.214] CloseHandle (hObject=0x3d0) returned 1 [0124.214] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x547) returned 0x3bc8718 [0124.214] CreateFileW (lpFileName="\\\\?\\c:\\users\\public\\libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.214] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x1183648 [0124.226] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.226] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.237] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="recordedtv.library-ms", cAlternateFileName="")) returned 0 [0124.237] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.238] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b30) returned 1 [0124.238] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1c0) returned 1 [0124.238] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\music\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.239] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x8373249f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83734d62, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83734d62, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83734d62, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x837398a0, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.240] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.240] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.241] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b70) returned 1 [0124.241] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1b0) returned 1 [0124.241] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.276] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x8373c0a6, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8373c0a6, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.277] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8373c0a6, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8373c0a6, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83741081, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.277] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.277] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.277] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.278] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bb8) returned 1 [0124.278] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e140) returned 1 [0124.278] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\public\\videos\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.279] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x83741081, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83741081, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.280] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83741081, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83741081, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83741081, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.280] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.280] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.280] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.281] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836e8) returned 1 [0124.281] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1d0) returned 1 [0124.281] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\contacts\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0124.281] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x83756e1d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.282] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83756e1d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83756e1d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8375a0c5, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.282] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.282] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0124.282] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0124.283] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0124.283] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1e0) returned 1 [0124.283] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.283] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x575be772, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8375bf2c, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.284] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc67130, ftCreationTime.dwHighDateTime=0x1d758fd, ftLastAccessTime.dwLowDateTime=0xa1558af0, ftLastAccessTime.dwHighDateTime=0x1d75ab4, ftLastWriteTime.dwLowDateTime=0xa1558af0, ftLastWriteTime.dwHighDateTime=0x1d75ab4, nFileSizeHigh=0x0, nFileSizeLow=0x152ef, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="-Z-V0ExGeBpI5TSR.swf", cAlternateFileName="")) returned 1 [0124.284] PathFindExtensionW (pszPath="-z-v0exgebpi5tsr.swf") returned=".swf" [0124.284] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\-Z-V0ExGeBpI5TSR.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-z-v0exgebpi5tsr.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.285] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.285] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.285] CloseHandle (hObject=0x3d0) returned 1 [0124.285] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1544f) returned 0x3bab170 [0124.286] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\-Z-V0ExGeBpI5TSR.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-z-v0exgebpi5tsr.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.286] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183648 [0124.288] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.288] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.318] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc39c89f0, ftCreationTime.dwHighDateTime=0x1d74cfa, ftLastAccessTime.dwLowDateTime=0xb14b7130, ftLastAccessTime.dwHighDateTime=0x1d751b9, ftLastWriteTime.dwLowDateTime=0xb14b7130, ftLastWriteTime.dwHighDateTime=0x1d751b9, nFileSizeHigh=0x0, nFileSizeLow=0x5542, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="01YAMgo9xg6KO6O.mkv", cAlternateFileName="")) returned 1 [0124.318] PathFindExtensionW (pszPath="01yamgo9xg6ko6o.mkv") returned=".mkv" [0124.318] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\01YAMgo9xg6KO6O.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\01yamgo9xg6ko6o.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.318] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.319] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.319] CloseHandle (hObject=0x3d0) returned 1 [0124.319] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x56a2) returned 0x3bc8718 [0124.320] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\01YAMgo9xg6KO6O.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\01yamgo9xg6ko6o.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.320] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183648 [0124.321] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.321] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.330] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b2efc0, ftCreationTime.dwHighDateTime=0x1d75637, ftLastAccessTime.dwLowDateTime=0x8ec7f750, ftLastAccessTime.dwHighDateTime=0x1d757d1, ftLastWriteTime.dwLowDateTime=0x8ec7f750, ftLastWriteTime.dwHighDateTime=0x1d757d1, nFileSizeHigh=0x0, nFileSizeLow=0x7f2f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1 UW.wav", cAlternateFileName="")) returned 1 [0124.330] PathFindExtensionW (pszPath="1 uw.wav") returned=".wav" [0124.330] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\1 UW.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\1 uw.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.330] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.330] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.330] CloseHandle (hObject=0x3d0) returned 1 [0124.331] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x808f) returned 0x3bab170 [0124.332] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\1 UW.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\1 uw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.332] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x56) returned 0x1183648 [0124.334] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.334] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.342] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8375bf2c, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8375bf2c, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x837630bb, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.342] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77149c50, ftCreationTime.dwHighDateTime=0x1d7531f, ftLastAccessTime.dwLowDateTime=0xa1c13ec0, ftLastAccessTime.dwHighDateTime=0x1d75777, ftLastWriteTime.dwLowDateTime=0xa1c13ec0, ftLastWriteTime.dwHighDateTime=0x1d75777, nFileSizeHigh=0x0, nFileSizeLow=0x123ca, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="33awWl-CR.avi", cAlternateFileName="")) returned 1 [0124.342] PathFindExtensionW (pszPath="33awwl-cr.avi") returned=".avi" [0124.342] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\33awWl-CR.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\33awwl-cr.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.343] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.343] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.343] CloseHandle (hObject=0x3d0) returned 1 [0124.343] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1252a) returned 0x3bab170 [0124.345] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\33awWl-CR.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\33awwl-cr.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.345] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183648 [0124.347] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.347] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.360] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d2a0350, ftCreationTime.dwHighDateTime=0x1d75751, ftLastAccessTime.dwLowDateTime=0x5d9ffa20, ftLastAccessTime.dwHighDateTime=0x1d758b1, ftLastWriteTime.dwLowDateTime=0x5d9ffa20, ftLastWriteTime.dwHighDateTime=0x1d758b1, nFileSizeHigh=0x0, nFileSizeLow=0xdeeb, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="6ln5Q1NpLV8X.swf", cAlternateFileName="")) returned 1 [0124.360] PathFindExtensionW (pszPath="6ln5q1nplv8x.swf") returned=".swf" [0124.360] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\6ln5Q1NpLV8X.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\6ln5q1nplv8x.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.360] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.361] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.361] CloseHandle (hObject=0x3d0) returned 1 [0124.361] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xe04b) returned 0x3bab170 [0124.362] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\6ln5Q1NpLV8X.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\6ln5q1nplv8x.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.363] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183648 [0124.364] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.364] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.374] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42e2f40, ftCreationTime.dwHighDateTime=0x1d752b1, ftLastAccessTime.dwLowDateTime=0x4c4dce20, ftLastAccessTime.dwHighDateTime=0x1d757ba, ftLastWriteTime.dwLowDateTime=0x4c4dce20, ftLastWriteTime.dwHighDateTime=0x1d757ba, nFileSizeHigh=0x0, nFileSizeLow=0x10465, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="8gunvOc6.avi", cAlternateFileName="")) returned 1 [0124.375] PathFindExtensionW (pszPath="8gunvoc6.avi") returned=".avi" [0124.375] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\8gunvOc6.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\8gunvoc6.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.375] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.375] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.375] CloseHandle (hObject=0x3d0) returned 1 [0124.375] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x105c5) returned 0x3bab170 [0124.376] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\8gunvOc6.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\8gunvoc6.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.377] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183648 [0124.378] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.378] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.386] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1637630, ftCreationTime.dwHighDateTime=0x1d7585a, ftLastAccessTime.dwLowDateTime=0x90188110, ftLastAccessTime.dwHighDateTime=0x1d75a1f, ftLastWriteTime.dwLowDateTime=0x90188110, ftLastWriteTime.dwHighDateTime=0x1d75a1f, nFileSizeHigh=0x0, nFileSizeLow=0x84a8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="AJEpb8eU1fWd.wav", cAlternateFileName="")) returned 1 [0124.386] PathFindExtensionW (pszPath="ajepb8eu1fwd.wav") returned=".wav" [0124.386] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\AJEpb8eU1fWd.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ajepb8eu1fwd.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.386] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.386] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.386] CloseHandle (hObject=0x3d0) returned 1 [0124.386] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x8608) returned 0x3bab170 [0124.387] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\AJEpb8eU1fWd.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ajepb8eu1fwd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.387] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183648 [0124.389] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.389] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.400] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3dfb9f0, ftCreationTime.dwHighDateTime=0x1d75a2c, ftLastAccessTime.dwLowDateTime=0x93f41f20, ftLastAccessTime.dwHighDateTime=0x1d75c44, ftLastWriteTime.dwLowDateTime=0x93f41f20, ftLastWriteTime.dwHighDateTime=0x1d75c44, nFileSizeHigh=0x0, nFileSizeLow=0x12630, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="B snKe5YsxqO.mp4", cAlternateFileName="")) returned 1 [0124.400] PathFindExtensionW (pszPath="b snke5ysxqo.mp4") returned=".mp4" [0124.400] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\B snKe5YsxqO.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\b snke5ysxqo.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.400] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.400] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.400] CloseHandle (hObject=0x3d0) returned 1 [0124.400] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x12790) returned 0x3bab170 [0124.402] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\B snKe5YsxqO.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\b snke5ysxqo.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.403] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183648 [0124.404] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.404] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.422] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc74ce6c0, ftCreationTime.dwHighDateTime=0x1d751e7, ftLastAccessTime.dwLowDateTime=0xe3400d30, ftLastAccessTime.dwHighDateTime=0x1d7534a, ftLastWriteTime.dwLowDateTime=0xe3400d30, ftLastWriteTime.dwHighDateTime=0x1d7534a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="bfxP6 wq", cAlternateFileName="")) returned 1 [0124.422] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1d0 [0124.422] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x1183648 [0124.422] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x11836a8 [0124.423] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.423] CloseHandle (hObject=0x3d0) returned 1 [0124.428] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.428] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x11836a8 [0124.428] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.429] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.429] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.431] CloseHandle (hObject=0x3d0) returned 1 [0124.431] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8afd6bf0, ftCreationTime.dwHighDateTime=0x1d75c1d, ftLastAccessTime.dwLowDateTime=0xdcd28510, ftLastAccessTime.dwHighDateTime=0x1d75c67, ftLastWriteTime.dwLowDateTime=0xdcd28510, ftLastWriteTime.dwHighDateTime=0x1d75c67, nFileSizeHigh=0x0, nFileSizeLow=0x1552c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="BZGdF1.gif", cAlternateFileName="")) returned 1 [0124.431] PathFindExtensionW (pszPath="bzgdf1.gif") returned=".gif" [0124.431] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\BZGdF1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bzgdf1.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.436] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.436] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.436] CloseHandle (hObject=0x3d0) returned 1 [0124.443] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1568c) returned 0x3bab170 [0124.445] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\BZGdF1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bzgdf1.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.445] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x11836a8 [0124.447] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.447] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.464] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef982aa0, ftCreationTime.dwHighDateTime=0x1d754c0, ftLastAccessTime.dwLowDateTime=0x60e20730, ftLastAccessTime.dwHighDateTime=0x1d755bb, ftLastWriteTime.dwLowDateTime=0x60e20730, ftLastWriteTime.dwHighDateTime=0x1d755bb, nFileSizeHigh=0x0, nFileSizeLow=0x794d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="cmuFOUIVnjG4az4rOtOY.mkv", cAlternateFileName="")) returned 1 [0124.464] PathFindExtensionW (pszPath="cmufouivnjg4az4rotoy.mkv") returned=".mkv" [0124.465] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\cmuFOUIVnjG4az4rOtOY.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cmufouivnjg4az4rotoy.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.465] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.465] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.465] CloseHandle (hObject=0x3d0) returned 1 [0124.465] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7aad) returned 0x3bab170 [0124.467] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\cmuFOUIVnjG4az4rOtOY.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cmufouivnjg4az4rotoy.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.467] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x76) returned 0x11836a8 [0124.469] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.469] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.480] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2924edf0, ftCreationTime.dwHighDateTime=0x1d75adc, ftLastAccessTime.dwLowDateTime=0x39b93040, ftLastAccessTime.dwHighDateTime=0x1d75c17, ftLastWriteTime.dwLowDateTime=0x39b93040, ftLastWriteTime.dwHighDateTime=0x1d75c17, nFileSizeHigh=0x0, nFileSizeLow=0x10cb0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Cva PS2HA_.m4a", cAlternateFileName="")) returned 1 [0124.480] PathFindExtensionW (pszPath="cva ps2ha_.m4a") returned=".m4a" [0124.481] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Cva PS2HA_.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cva ps2ha_.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.481] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.481] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.481] CloseHandle (hObject=0x3d0) returned 1 [0124.481] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10e10) returned 0x3bab170 [0124.485] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Cva PS2HA_.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cva ps2ha_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.485] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x11836a8 [0124.487] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.487] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.499] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0124.499] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f61a510, ftCreationTime.dwHighDateTime=0x1d75484, ftLastAccessTime.dwLowDateTime=0x81af01a0, ftLastAccessTime.dwHighDateTime=0x1d75b8f, ftLastWriteTime.dwLowDateTime=0x81af01a0, ftLastWriteTime.dwHighDateTime=0x1d75b8f, nFileSizeHigh=0x0, nFileSizeLow=0x137e6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="dgDGWB.docx", cAlternateFileName="")) returned 1 [0124.500] PathFindExtensionW (pszPath="dgdgwb.docx") returned=".docx" [0124.500] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\dgDGWB.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\dgdgwb.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.500] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.500] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.500] CloseHandle (hObject=0x3d0) returned 1 [0124.500] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x13946) returned 0x3bab170 [0124.502] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\dgDGWB.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\dgdgwb.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.502] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x11836a8 [0124.504] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.506] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.519] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dca1180, ftCreationTime.dwHighDateTime=0x1d75807, ftLastAccessTime.dwLowDateTime=0x5407fcc0, ftLastAccessTime.dwHighDateTime=0x1d75c8e, ftLastWriteTime.dwLowDateTime=0x5407fcc0, ftLastWriteTime.dwHighDateTime=0x1d75c8e, nFileSizeHigh=0x0, nFileSizeLow=0x14627, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="eMPya.xlsx", cAlternateFileName="")) returned 1 [0124.519] PathFindExtensionW (pszPath="empya.xlsx") returned=".xlsx" [0124.519] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\eMPya.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\empya.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.520] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.520] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.520] CloseHandle (hObject=0x3d0) returned 1 [0124.520] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x14787) returned 0x3bab170 [0124.524] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\eMPya.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\empya.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.524] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x11836a8 [0124.526] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.526] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.537] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d76def0, ftCreationTime.dwHighDateTime=0x1d74f96, ftLastAccessTime.dwLowDateTime=0x8b9499e0, ftLastAccessTime.dwHighDateTime=0x1d75c80, ftLastWriteTime.dwLowDateTime=0x8b9499e0, ftLastWriteTime.dwHighDateTime=0x1d75c80, nFileSizeHigh=0x0, nFileSizeLow=0x4adc, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="FJejnU-5I.pdf", cAlternateFileName="")) returned 1 [0124.537] PathFindExtensionW (pszPath="fjejnu-5i.pdf") returned=".pdf" [0124.537] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\FJejnU-5I.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fjejnu-5i.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.538] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.538] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.538] CloseHandle (hObject=0x3d0) returned 1 [0124.538] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4c3c) returned 0x3bc8718 [0124.539] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\FJejnU-5I.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fjejnu-5i.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.540] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x11836a8 [0124.541] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.543] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.549] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb707110, ftCreationTime.dwHighDateTime=0x1d75b3d, ftLastAccessTime.dwLowDateTime=0xd14fd840, ftLastAccessTime.dwHighDateTime=0x1d75b6e, ftLastWriteTime.dwLowDateTime=0xd14fd840, ftLastWriteTime.dwHighDateTime=0x1d75b6e, nFileSizeHigh=0x0, nFileSizeLow=0x5b2e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="fn8P6 hgNkusN.doc", cAlternateFileName="")) returned 1 [0124.549] PathFindExtensionW (pszPath="fn8p6 hgnkusn.doc") returned=".doc" [0124.549] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\fn8P6 hgNkusN.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fn8p6 hgnkusn.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.549] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.549] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.549] CloseHandle (hObject=0x3d0) returned 1 [0124.549] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x5c8e) returned 0x3bc8718 [0124.550] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\fn8P6 hgNkusN.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fn8p6 hgnkusn.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.550] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x11836a8 [0124.551] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.552] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.558] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1947d9e0, ftCreationTime.dwHighDateTime=0x1d755c0, ftLastAccessTime.dwLowDateTime=0xa4719340, ftLastAccessTime.dwHighDateTime=0x1d757db, ftLastWriteTime.dwLowDateTime=0xa4719340, ftLastWriteTime.dwHighDateTime=0x1d757db, nFileSizeHigh=0x0, nFileSizeLow=0x63bf, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Fvhx_vxdy.wav", cAlternateFileName="")) returned 1 [0124.558] PathFindExtensionW (pszPath="fvhx_vxdy.wav") returned=".wav" [0124.558] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Fvhx_vxdy.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fvhx_vxdy.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.558] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.558] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.558] CloseHandle (hObject=0x3d0) returned 1 [0124.559] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x651f) returned 0x3bc8718 [0124.559] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Fvhx_vxdy.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fvhx_vxdy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.559] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x11836a8 [0124.560] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.560] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.565] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61fd29d0, ftCreationTime.dwHighDateTime=0x1d753bb, ftLastAccessTime.dwLowDateTime=0x5a895b50, ftLastAccessTime.dwHighDateTime=0x1d756f0, ftLastWriteTime.dwLowDateTime=0x5a895b50, ftLastWriteTime.dwHighDateTime=0x1d756f0, nFileSizeHigh=0x0, nFileSizeLow=0xa151, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ImpY3itno4.bmp", cAlternateFileName="")) returned 1 [0124.565] PathFindExtensionW (pszPath="impy3itno4.bmp") returned=".bmp" [0124.565] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\ImpY3itno4.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\impy3itno4.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.566] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.566] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.566] CloseHandle (hObject=0x3d0) returned 1 [0124.566] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xa2b1) returned 0x3bab170 [0124.567] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\ImpY3itno4.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\impy3itno4.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.567] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x11836a8 [0124.569] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.569] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.579] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6717b90, ftCreationTime.dwHighDateTime=0x1d757d3, ftLastAccessTime.dwLowDateTime=0x977118d0, ftLastAccessTime.dwHighDateTime=0x1d75cb0, ftLastWriteTime.dwLowDateTime=0x977118d0, ftLastWriteTime.dwHighDateTime=0x1d75cb0, nFileSizeHigh=0x0, nFileSizeLow=0xbc6f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="IUm_.bmp", cAlternateFileName="")) returned 1 [0124.579] PathFindExtensionW (pszPath="ium_.bmp") returned=".bmp" [0124.579] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\IUm_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ium_.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.579] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.579] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.579] CloseHandle (hObject=0x3d0) returned 1 [0124.579] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbdcf) returned 0x3bab170 [0124.581] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\IUm_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ium_.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.581] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x56) returned 0x11836a8 [0124.582] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.582] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.590] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576f8f40, ftCreationTime.dwHighDateTime=0x1d75b71, ftLastAccessTime.dwLowDateTime=0x92ee3590, ftLastAccessTime.dwHighDateTime=0x1d75bfc, ftLastWriteTime.dwLowDateTime=0x92ee3590, ftLastWriteTime.dwHighDateTime=0x1d75bfc, nFileSizeHigh=0x0, nFileSizeLow=0x656b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="JWX47syN3PWU.bmp", cAlternateFileName="")) returned 1 [0124.590] PathFindExtensionW (pszPath="jwx47syn3pwu.bmp") returned=".bmp" [0124.590] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\JWX47syN3PWU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\jwx47syn3pwu.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.590] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.590] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.590] CloseHandle (hObject=0x3d0) returned 1 [0124.591] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x66cb) returned 0x3bc8718 [0124.592] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\JWX47syN3PWU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\jwx47syn3pwu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.592] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x11836a8 [0124.594] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.594] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.600] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151f9200, ftCreationTime.dwHighDateTime=0x1d74fe3, ftLastAccessTime.dwLowDateTime=0x47c9a570, ftLastAccessTime.dwHighDateTime=0x1d75bb3, ftLastWriteTime.dwLowDateTime=0x47c9a570, ftLastWriteTime.dwHighDateTime=0x1d75bb3, nFileSizeHigh=0x0, nFileSizeLow=0x13ba9, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="LYqznbAEVzwqX45oeA.mp4", cAlternateFileName="")) returned 1 [0124.601] PathFindExtensionW (pszPath="lyqznbaevzwqx45oea.mp4") returned=".mp4" [0124.601] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\LYqznbAEVzwqX45oeA.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lyqznbaevzwqx45oea.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.601] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.601] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.601] CloseHandle (hObject=0x3d0) returned 1 [0124.601] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x13d09) returned 0x3bab170 [0124.603] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\LYqznbAEVzwqX45oeA.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lyqznbaevzwqx45oea.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.603] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x11836a8 [0124.607] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.608] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.617] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6e16700, ftCreationTime.dwHighDateTime=0x1d74cf4, ftLastAccessTime.dwLowDateTime=0x46a5e40, ftLastAccessTime.dwHighDateTime=0x1d759ed, ftLastWriteTime.dwLowDateTime=0x46a5e40, ftLastWriteTime.dwHighDateTime=0x1d759ed, nFileSizeHigh=0x0, nFileSizeLow=0xa38c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="O2CR.bmp", cAlternateFileName="")) returned 1 [0124.617] PathFindExtensionW (pszPath="o2cr.bmp") returned=".bmp" [0124.617] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\O2CR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\o2cr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.617] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.617] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.617] CloseHandle (hObject=0x3d0) returned 1 [0124.617] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xa4ec) returned 0x3bab170 [0124.618] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\O2CR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\o2cr.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.619] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x56) returned 0x11836a8 [0124.620] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.620] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.630] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b0fde0, ftCreationTime.dwHighDateTime=0x1d74dac, ftLastAccessTime.dwLowDateTime=0x8bcbf010, ftLastAccessTime.dwHighDateTime=0x1d7596b, ftLastWriteTime.dwLowDateTime=0x8bcbf010, ftLastWriteTime.dwHighDateTime=0x1d7596b, nFileSizeHigh=0x0, nFileSizeLow=0x426e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Od9_u.xlsx", cAlternateFileName="")) returned 1 [0124.630] PathFindExtensionW (pszPath="od9_u.xlsx") returned=".xlsx" [0124.631] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Od9_u.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\od9_u.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.631] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.631] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.631] CloseHandle (hObject=0x3d0) returned 1 [0124.631] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x43ce) returned 0x3bc8718 [0124.633] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Od9_u.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\od9_u.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.633] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x11836a8 [0124.634] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.634] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.642] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2b7b3f0, ftCreationTime.dwHighDateTime=0x1d7548f, ftLastAccessTime.dwLowDateTime=0xb56baa00, ftLastAccessTime.dwHighDateTime=0x1d756aa, ftLastWriteTime.dwLowDateTime=0xb56baa00, ftLastWriteTime.dwHighDateTime=0x1d756aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="PfzHOo0Zmp", cAlternateFileName="")) returned 1 [0124.642] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e270 [0124.642] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x11836a8 [0124.642] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x11837d8 [0124.642] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0124.642] CloseHandle (hObject=0x3d0) returned 1 [0124.643] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.643] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x82) returned 0x11837d8 [0124.643] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.643] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.643] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0124.644] CloseHandle (hObject=0x3d0) returned 1 [0124.644] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd49270, ftCreationTime.dwHighDateTime=0x1d75238, ftLastAccessTime.dwLowDateTime=0x800650, ftLastAccessTime.dwHighDateTime=0x1d75bfe, ftLastWriteTime.dwLowDateTime=0x800650, ftLastWriteTime.dwHighDateTime=0x1d75bfe, nFileSizeHigh=0x0, nFileSizeLow=0x909e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="qgErEk.avi", cAlternateFileName="")) returned 1 [0124.645] PathFindExtensionW (pszPath="qgerek.avi") returned=".avi" [0124.645] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qgErEk.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qgerek.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0124.645] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.645] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.645] CloseHandle (hObject=0x3d0) returned 1 [0124.645] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x91fe) returned 0x3bab170 [0124.646] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qgErEk.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qgerek.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0124.647] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x11837d8 [0124.648] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.648] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.666] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378aec90, ftCreationTime.dwHighDateTime=0x1d74f48, ftLastAccessTime.dwLowDateTime=0xe7cd81d0, ftLastAccessTime.dwHighDateTime=0x1d75a1f, ftLastWriteTime.dwLowDateTime=0xe7cd81d0, ftLastWriteTime.dwHighDateTime=0x1d75a1f, nFileSizeHigh=0x0, nFileSizeLow=0x1aa6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="qzaVN1YR5.png", cAlternateFileName="")) returned 1 [0124.666] PathFindExtensionW (pszPath="qzavn1yr5.png") returned=".png" [0124.666] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qzaVN1YR5.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzavn1yr5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.666] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.666] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.666] CloseHandle (hObject=0x3d4) returned 1 [0124.667] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1c06) returned 0x3bc8718 [0124.667] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qzaVN1YR5.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzavn1yr5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.667] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183920 [0124.671] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.671] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.714] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a31a60, ftCreationTime.dwHighDateTime=0x1d75253, ftLastAccessTime.dwLowDateTime=0x40f0a700, ftLastAccessTime.dwHighDateTime=0x1d75a6c, ftLastWriteTime.dwLowDateTime=0x40f0a700, ftLastWriteTime.dwHighDateTime=0x1d75a6c, nFileSizeHigh=0x0, nFileSizeLow=0x10435, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="QzpxI33e01yGBOLeX.mkv", cAlternateFileName="")) returned 1 [0124.714] PathFindExtensionW (pszPath="qzpxi33e01ygbolex.mkv") returned=".mkv" [0124.714] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\QzpxI33e01yGBOLeX.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzpxi33e01ygbolex.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.714] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.715] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.715] CloseHandle (hObject=0x3d4) returned 1 [0124.715] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10595) returned 0x3bab170 [0124.716] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\QzpxI33e01yGBOLeX.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzpxi33e01ygbolex.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.717] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11837d8 [0124.728] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.728] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.760] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313161a0, ftCreationTime.dwHighDateTime=0x1d755f4, ftLastAccessTime.dwLowDateTime=0xf32e0ba0, ftLastAccessTime.dwHighDateTime=0x1d75d10, ftLastWriteTime.dwLowDateTime=0xf32e0ba0, ftLastWriteTime.dwHighDateTime=0x1d75d10, nFileSizeHigh=0x0, nFileSizeLow=0x148a1, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Rb_JLSd1jDdcCtXSZ.gif", cAlternateFileName="")) returned 1 [0124.760] PathFindExtensionW (pszPath="rb_jlsd1jddcctxsz.gif") returned=".gif" [0124.760] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Rb_JLSd1jDdcCtXSZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\rb_jlsd1jddcctxsz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.761] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.761] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.761] CloseHandle (hObject=0x3d4) returned 1 [0124.761] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x14a01) returned 0x3bab170 [0124.763] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Rb_JLSd1jDdcCtXSZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\rb_jlsd1jddcctxsz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.763] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11837d8 [0124.785] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.796] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.807] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ca6680, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x35ca6680, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0xc8b0d400, ftLastWriteTime.dwHighDateTime=0x1d76f69, nFileSizeHigh=0x0, nFileSizeLow=0xdeb88, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="urnxby.exe", cAlternateFileName="")) returned 1 [0124.807] PathFindExtensionW (pszPath="urnxby.exe") returned=".exe" [0124.807] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2954bc0, ftCreationTime.dwHighDateTime=0x1d7575e, ftLastAccessTime.dwLowDateTime=0x16491620, ftLastAccessTime.dwHighDateTime=0x1d75bd1, ftLastWriteTime.dwLowDateTime=0x16491620, ftLastWriteTime.dwHighDateTime=0x1d75bd1, nFileSizeHigh=0x0, nFileSizeLow=0x1852, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="y1Mi2Ynx_elk.mp3", cAlternateFileName="")) returned 1 [0124.807] PathFindExtensionW (pszPath="y1mi2ynx_elk.mp3") returned=".mp3" [0124.807] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\y1Mi2Ynx_elk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\y1mi2ynx_elk.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.807] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.807] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.807] CloseHandle (hObject=0x3d4) returned 1 [0124.808] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x19b2) returned 0x3bc8718 [0124.808] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\y1Mi2Ynx_elk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\y1mi2ynx_elk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.808] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x11837d8 [0124.810] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.810] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.818] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d524e0, ftCreationTime.dwHighDateTime=0x1d75b8c, ftLastAccessTime.dwLowDateTime=0x8131e20, ftLastAccessTime.dwHighDateTime=0x1d75c62, ftLastWriteTime.dwLowDateTime=0x8131e20, ftLastWriteTime.dwHighDateTime=0x1d75c62, nFileSizeHigh=0x0, nFileSizeLow=0x140c7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yKVRq4UJhors0kzj.gif", cAlternateFileName="")) returned 1 [0124.818] PathFindExtensionW (pszPath="ykvrq4ujhors0kzj.gif") returned=".gif" [0124.818] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\yKVRq4UJhors0kzj.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ykvrq4ujhors0kzj.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.818] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.818] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.818] CloseHandle (hObject=0x3d4) returned 1 [0124.819] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x14227) returned 0x3bab170 [0124.821] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\yKVRq4UJhors0kzj.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ykvrq4ujhors0kzj.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.821] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11837d8 [0124.822] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.822] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.849] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27814500, ftCreationTime.dwHighDateTime=0x1d75737, ftLastAccessTime.dwLowDateTime=0xeea24020, ftLastAccessTime.dwHighDateTime=0x1d75ada, ftLastWriteTime.dwLowDateTime=0xeea24020, ftLastWriteTime.dwHighDateTime=0x1d75ada, nFileSizeHigh=0x0, nFileSizeLow=0x18752, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_HZf8VI--lGsLJmGS.jpg", cAlternateFileName="")) returned 1 [0124.849] PathFindExtensionW (pszPath="_hzf8vi--lgsljmgs.jpg") returned=".jpg" [0124.849] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_HZf8VI--lGsLJmGS.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_hzf8vi--lgsljmgs.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.850] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.850] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.850] CloseHandle (hObject=0x3d4) returned 1 [0124.850] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x188b2) returned 0x3bab170 [0124.852] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_HZf8VI--lGsLJmGS.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_hzf8vi--lgsljmgs.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.853] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11837d8 [0124.854] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.854] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.866] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a263f0, ftCreationTime.dwHighDateTime=0x1d75853, ftLastAccessTime.dwLowDateTime=0x56970750, ftLastAccessTime.dwHighDateTime=0x1d759b5, ftLastWriteTime.dwLowDateTime=0x56970750, ftLastWriteTime.dwHighDateTime=0x1d759b5, nFileSizeHigh=0x0, nFileSizeLow=0xfafc, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_vijf9R7840.bmp", cAlternateFileName="")) returned 1 [0124.866] PathFindExtensionW (pszPath="_vijf9r7840.bmp") returned=".bmp" [0124.866] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9R7840.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9r7840.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.867] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.867] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.867] CloseHandle (hObject=0x3d4) returned 1 [0124.867] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xfc5c) returned 0x3bab170 [0124.870] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9R7840.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9r7840.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.870] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x11837d8 [0124.872] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.872] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.883] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a263f0, ftCreationTime.dwHighDateTime=0x1d75853, ftLastAccessTime.dwLowDateTime=0x56970750, ftLastAccessTime.dwHighDateTime=0x1d759b5, ftLastWriteTime.dwLowDateTime=0x56970750, ftLastWriteTime.dwHighDateTime=0x1d759b5, nFileSizeHigh=0x0, nFileSizeLow=0xfafc, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_vijf9r7840.bmp", cAlternateFileName="")) returned 0 [0124.883] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0124.884] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c48) returned 1 [0124.884] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e260) returned 1 [0124.884] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0124.885] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x14634ace, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x837681a0, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0124.886] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14621a0, ftCreationTime.dwHighDateTime=0x1d6f6c2, ftLastAccessTime.dwLowDateTime=0x3ef81d80, ftLastAccessTime.dwHighDateTime=0x1d72dd9, ftLastWriteTime.dwLowDateTime=0x3ef81d80, ftLastWriteTime.dwHighDateTime=0x1d72dd9, nFileSizeHigh=0x0, nFileSizeLow=0xd611, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="-DN qa.docx", cAlternateFileName="")) returned 1 [0124.886] PathFindExtensionW (pszPath="-dn qa.docx") returned=".docx" [0124.886] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\-DN qa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-dn qa.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.886] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.886] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.887] CloseHandle (hObject=0x3d4) returned 1 [0124.887] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xd771) returned 0x3bab170 [0124.889] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\-DN qa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-dn qa.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.889] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x11837d8 [0124.890] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.891] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.904] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5702890, ftCreationTime.dwHighDateTime=0x1d754d6, ftLastAccessTime.dwLowDateTime=0xa458e4d0, ftLastAccessTime.dwHighDateTime=0x1d758d0, ftLastWriteTime.dwLowDateTime=0xa458e4d0, ftLastWriteTime.dwHighDateTime=0x1d758d0, nFileSizeHigh=0x0, nFileSizeLow=0x40df, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="0f0dtE0zrFDiBuhWyC5.docx", cAlternateFileName="")) returned 1 [0124.905] PathFindExtensionW (pszPath="0f0dte0zrfdibuhwyc5.docx") returned=".docx" [0124.905] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\0f0dtE0zrFDiBuhWyC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\0f0dte0zrfdibuhwyc5.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.905] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.905] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.905] CloseHandle (hObject=0x3d4) returned 1 [0124.905] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x423f) returned 0x3bc8718 [0124.906] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\0f0dtE0zrFDiBuhWyC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\0f0dte0zrfdibuhwyc5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.907] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7a) returned 0x11837d8 [0124.912] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.912] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.920] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837681a0, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x837681a0, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8376e0aa, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0124.920] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf62b4ba0, ftCreationTime.dwHighDateTime=0x1d70a46, ftLastAccessTime.dwLowDateTime=0x80f2ca0, ftLastAccessTime.dwHighDateTime=0x1d74e63, ftLastWriteTime.dwLowDateTime=0x80f2ca0, ftLastWriteTime.dwHighDateTime=0x1d74e63, nFileSizeHigh=0x0, nFileSizeLow=0xb9e4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="3kI5HqhForfqaGGgxr.xlsx", cAlternateFileName="")) returned 1 [0124.920] PathFindExtensionW (pszPath="3ki5hqhforfqagggxr.xlsx") returned=".xlsx" [0124.920] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\3kI5HqhForfqaGGgxr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ki5hqhforfqagggxr.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.920] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.920] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.921] CloseHandle (hObject=0x3d4) returned 1 [0124.921] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbb44) returned 0x3bab170 [0124.922] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\3kI5HqhForfqaGGgxr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ki5hqhforfqagggxr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.923] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x11837d8 [0124.924] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.924] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.935] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f7ae030, ftCreationTime.dwHighDateTime=0x1d73d30, ftLastAccessTime.dwLowDateTime=0x27843f70, ftLastAccessTime.dwHighDateTime=0x1d755bc, ftLastWriteTime.dwLowDateTime=0x27843f70, ftLastWriteTime.dwHighDateTime=0x1d755bc, nFileSizeHigh=0x0, nFileSizeLow=0xb46f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="400IjG TRfjGKkG.docx", cAlternateFileName="")) returned 1 [0124.935] PathFindExtensionW (pszPath="400ijg trfjgkkg.docx") returned=".docx" [0124.936] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\400IjG TRfjGKkG.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\400ijg trfjgkkg.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0124.936] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0124.936] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0124.936] CloseHandle (hObject=0x3d4) returned 1 [0124.936] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb5cf) returned 0x3bab170 [0124.938] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\400IjG TRfjGKkG.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\400ijg trfjgkkg.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0124.938] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x11837d8 [0124.940] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0124.940] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.003] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71151fe0, ftCreationTime.dwHighDateTime=0x1d75447, ftLastAccessTime.dwLowDateTime=0x4ede4ab0, ftLastAccessTime.dwHighDateTime=0x1d75883, ftLastWriteTime.dwLowDateTime=0x4ede4ab0, ftLastWriteTime.dwHighDateTime=0x1d75883, nFileSizeHigh=0x0, nFileSizeLow=0x9403, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="5ujftJ9fpTg1.docx", cAlternateFileName="")) returned 1 [0125.003] PathFindExtensionW (pszPath="5ujftj9fptg1.docx") returned=".docx" [0125.004] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\5ujftJ9fpTg1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5ujftj9fptg1.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.004] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.004] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.004] CloseHandle (hObject=0x3d4) returned 1 [0125.004] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9563) returned 0x3bab170 [0125.006] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\5ujftJ9fpTg1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5ujftj9fptg1.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.006] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11837d8 [0125.008] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.008] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.016] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6326120, ftCreationTime.dwHighDateTime=0x1d731ff, ftLastAccessTime.dwLowDateTime=0x60bf1930, ftLastAccessTime.dwHighDateTime=0x1d7347a, ftLastWriteTime.dwLowDateTime=0x60bf1930, ftLastWriteTime.dwHighDateTime=0x1d7347a, nFileSizeHigh=0x0, nFileSizeLow=0xb846, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="6zXJIpa.pptx", cAlternateFileName="")) returned 1 [0125.016] PathFindExtensionW (pszPath="6zxjipa.pptx") returned=".pptx" [0125.017] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\6zXJIpa.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\6zxjipa.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.017] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.017] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.017] CloseHandle (hObject=0x3d4) returned 1 [0125.017] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb9a6) returned 0x3bab170 [0125.019] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\6zXJIpa.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\6zxjipa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.019] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x11837d8 [0125.021] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.021] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.031] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea8b8200, ftCreationTime.dwHighDateTime=0x1d7028b, ftLastAccessTime.dwLowDateTime=0xf3e83800, ftLastAccessTime.dwHighDateTime=0x1d74f27, ftLastWriteTime.dwLowDateTime=0xf3e83800, ftLastWriteTime.dwHighDateTime=0x1d74f27, nFileSizeHigh=0x0, nFileSizeLow=0x17357, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="bxJv6_JJ.xlsx", cAlternateFileName="")) returned 1 [0125.031] PathFindExtensionW (pszPath="bxjv6_jj.xlsx") returned=".xlsx" [0125.031] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\bxJv6_JJ.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bxjv6_jj.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.031] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.031] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.032] CloseHandle (hObject=0x3d4) returned 1 [0125.032] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x174b7) returned 0x3bab170 [0125.034] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\bxJv6_JJ.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bxjv6_jj.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.034] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x11837d8 [0125.037] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.037] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.047] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333cea50, ftCreationTime.dwHighDateTime=0x1d7554a, ftLastAccessTime.dwLowDateTime=0x11143d80, ftLastAccessTime.dwHighDateTime=0x1d757e7, ftLastWriteTime.dwLowDateTime=0x11143d80, ftLastWriteTime.dwHighDateTime=0x1d757e7, nFileSizeHigh=0x0, nFileSizeLow=0x228b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="CNJ7vM7xU_fqXr.xls", cAlternateFileName="")) returned 1 [0125.048] PathFindExtensionW (pszPath="cnj7vm7xu_fqxr.xls") returned=".xls" [0125.048] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\CNJ7vM7xU_fqXr.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\cnj7vm7xu_fqxr.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.048] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.048] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.048] CloseHandle (hObject=0x3d4) returned 1 [0125.048] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x23eb) returned 0x3bc8718 [0125.049] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\CNJ7vM7xU_fqXr.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\cnj7vm7xu_fqxr.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.049] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11837d8 [0125.051] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.051] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.057] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.057] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164b62d0, ftCreationTime.dwHighDateTime=0x1d70e2f, ftLastAccessTime.dwLowDateTime=0xef8de900, ftLastAccessTime.dwHighDateTime=0x1d71889, ftLastWriteTime.dwLowDateTime=0xef8de900, ftLastWriteTime.dwHighDateTime=0x1d71889, nFileSizeHigh=0x0, nFileSizeLow=0x182dc, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="E0bAcSQhlr3rJxAYgov.xlsx", cAlternateFileName="")) returned 1 [0125.057] PathFindExtensionW (pszPath="e0bacsqhlr3rjxaygov.xlsx") returned=".xlsx" [0125.057] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\E0bAcSQhlr3rJxAYgov.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e0bacsqhlr3rjxaygov.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.057] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.058] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.058] CloseHandle (hObject=0x3d4) returned 1 [0125.058] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1843c) returned 0x3bab170 [0125.060] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\E0bAcSQhlr3rJxAYgov.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e0bacsqhlr3rjxaygov.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.060] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7a) returned 0x11837d8 [0125.061] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.061] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.083] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c87400, ftCreationTime.dwHighDateTime=0x1d7295d, ftLastAccessTime.dwLowDateTime=0x29b23220, ftLastAccessTime.dwHighDateTime=0x1d759d1, ftLastWriteTime.dwLowDateTime=0x29b23220, ftLastWriteTime.dwHighDateTime=0x1d759d1, nFileSizeHigh=0x0, nFileSizeLow=0x74d9, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ejY9.xlsx", cAlternateFileName="")) returned 1 [0125.083] PathFindExtensionW (pszPath="ejy9.xlsx") returned=".xlsx" [0125.083] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\ejY9.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejy9.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.083] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.084] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.084] CloseHandle (hObject=0x3d4) returned 1 [0125.084] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7639) returned 0x3bc8718 [0125.085] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\ejY9.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejy9.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.085] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x11837d8 [0125.086] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.087] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.094] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597d27d0, ftCreationTime.dwHighDateTime=0x1d7396a, ftLastAccessTime.dwLowDateTime=0x7f34a4c0, ftLastAccessTime.dwHighDateTime=0x1d75ced, ftLastWriteTime.dwLowDateTime=0x7f34a4c0, ftLastWriteTime.dwHighDateTime=0x1d75ced, nFileSizeHigh=0x0, nFileSizeLow=0x1cc2, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="gNkCMwtLS49pa.docx", cAlternateFileName="")) returned 1 [0125.094] PathFindExtensionW (pszPath="gnkcmwtls49pa.docx") returned=".docx" [0125.094] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\gNkCMwtLS49pa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gnkcmwtls49pa.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.094] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.094] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.095] CloseHandle (hObject=0x3d4) returned 1 [0125.095] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1e22) returned 0x3bc8718 [0125.096] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\gNkCMwtLS49pa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gnkcmwtls49pa.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.096] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11837d8 [0125.097] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.098] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.106] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b888890, ftCreationTime.dwHighDateTime=0x1d7594a, ftLastAccessTime.dwLowDateTime=0x737b6db0, ftLastAccessTime.dwHighDateTime=0x1d75beb, ftLastWriteTime.dwLowDateTime=0x737b6db0, ftLastWriteTime.dwHighDateTime=0x1d75beb, nFileSizeHigh=0x0, nFileSizeLow=0xdb53, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="hCetyp3G17Ciz.pps", cAlternateFileName="")) returned 1 [0125.106] PathFindExtensionW (pszPath="hcetyp3g17ciz.pps") returned=".pps" [0125.107] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\hCetyp3G17Ciz.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\hcetyp3g17ciz.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.107] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.107] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.107] CloseHandle (hObject=0x3d4) returned 1 [0125.107] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xdcb3) returned 0x3bab170 [0125.109] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\hCetyp3G17Ciz.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\hcetyp3g17ciz.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.109] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11837d8 [0125.111] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.111] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.123] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1003950, ftCreationTime.dwHighDateTime=0x1d70495, ftLastAccessTime.dwLowDateTime=0x3572aa0, ftLastAccessTime.dwHighDateTime=0x1d74904, ftLastWriteTime.dwLowDateTime=0x3572aa0, ftLastWriteTime.dwHighDateTime=0x1d74904, nFileSizeHigh=0x0, nFileSizeLow=0x8ca5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="l DJMmpijuAsqr21.pptx", cAlternateFileName="")) returned 1 [0125.123] PathFindExtensionW (pszPath="l djmmpijuasqr21.pptx") returned=".pptx" [0125.123] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\l DJMmpijuAsqr21.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l djmmpijuasqr21.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.124] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.124] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.124] CloseHandle (hObject=0x3d4) returned 1 [0125.124] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x8e05) returned 0x3bab170 [0125.125] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\l DJMmpijuAsqr21.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l djmmpijuasqr21.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.125] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x11837d8 [0125.127] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.127] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.134] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6cdffb0, ftCreationTime.dwHighDateTime=0x1d734d0, ftLastAccessTime.dwLowDateTime=0x2b198a80, ftLastAccessTime.dwHighDateTime=0x1d75514, ftLastWriteTime.dwLowDateTime=0x2b198a80, ftLastWriteTime.dwHighDateTime=0x1d75514, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="LSd7BeVtYtpJ.pptx", cAlternateFileName="")) returned 1 [0125.134] PathFindExtensionW (pszPath="lsd7bevtytpj.pptx") returned=".pptx" [0125.134] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\LSd7BeVtYtpJ.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lsd7bevtytpj.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.134] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.134] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.135] CloseHandle (hObject=0x3d4) returned 1 [0125.135] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1e7b) returned 0x3bc8718 [0125.135] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\LSd7BeVtYtpJ.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lsd7bevtytpj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.136] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11837d8 [0125.137] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.137] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.146] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Music", cAlternateFileName="")) returned 1 [0125.146] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Pictures", cAlternateFileName="")) returned 1 [0125.146] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="My Videos", cAlternateFileName="")) returned 1 [0125.146] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x65ef9a5c, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x65ef9a5c, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Outlook Files", cAlternateFileName="")) returned 1 [0125.146] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e170 [0125.146] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x11837d8 [0125.146] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183848 [0125.147] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d4 [0125.147] CloseHandle (hObject=0x3d4) returned 1 [0125.148] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.148] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8c) returned 0x1183848 [0125.148] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.148] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.148] WriteFile (in: hFile=0x3d4, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.149] CloseHandle (hObject=0x3d4) returned 1 [0125.150] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe7c6bc0, ftCreationTime.dwHighDateTime=0x1d6d757, ftLastAccessTime.dwLowDateTime=0x4fb95e70, ftLastAccessTime.dwHighDateTime=0x1d6fe9c, ftLastWriteTime.dwLowDateTime=0x4fb95e70, ftLastWriteTime.dwHighDateTime=0x1d6fe9c, nFileSizeHigh=0x0, nFileSizeLow=0xfe3a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="RbIb11kyJBfbC4lR.docx", cAlternateFileName="")) returned 1 [0125.150] PathFindExtensionW (pszPath="rbib11kyjbfbc4lr.docx") returned=".docx" [0125.150] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\RbIb11kyJBfbC4lR.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rbib11kyjbfbc4lr.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.150] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.150] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.150] CloseHandle (hObject=0x3d4) returned 1 [0125.150] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xff9a) returned 0x3bab170 [0125.152] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\RbIb11kyJBfbC4lR.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rbib11kyjbfbc4lr.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.152] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183848 [0125.154] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.154] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.183] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7a0ec10, ftCreationTime.dwHighDateTime=0x1d75409, ftLastAccessTime.dwLowDateTime=0x1ef89620, ftLastAccessTime.dwHighDateTime=0x1d758e2, ftLastWriteTime.dwLowDateTime=0x1ef89620, ftLastWriteTime.dwHighDateTime=0x1d758e2, nFileSizeHigh=0x0, nFileSizeLow=0x466f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SJGjS-9yqVHR1Sr.xlsx", cAlternateFileName="")) returned 1 [0125.184] PathFindExtensionW (pszPath="sjgjs-9yqvhr1sr.xlsx") returned=".xlsx" [0125.184] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\SJGjS-9yqVHR1Sr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sjgjs-9yqvhr1sr.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.185] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.186] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.186] CloseHandle (hObject=0x3d4) returned 1 [0125.186] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x47cf) returned 0x3bc8718 [0125.189] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\SJGjS-9yqVHR1Sr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sjgjs-9yqvhr1sr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.189] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x1183848 [0125.191] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.191] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.209] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23ea0640, ftCreationTime.dwHighDateTime=0x1d707df, ftLastAccessTime.dwLowDateTime=0x173756a0, ftLastAccessTime.dwHighDateTime=0x1d74d3f, ftLastWriteTime.dwLowDateTime=0x173756a0, ftLastWriteTime.dwHighDateTime=0x1d74d3f, nFileSizeHigh=0x0, nFileSizeLow=0xb9e4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="uvUqY N6Bfi.pptx", cAlternateFileName="")) returned 1 [0125.210] PathFindExtensionW (pszPath="uvuqy n6bfi.pptx") returned=".pptx" [0125.210] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\uvUqY N6Bfi.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uvuqy n6bfi.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.210] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.211] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.219] CloseHandle (hObject=0x3d4) returned 1 [0125.219] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbb44) returned 0x3bab170 [0125.221] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\uvUqY N6Bfi.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uvuqy n6bfi.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.221] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x1183848 [0125.225] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.225] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.239] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc434fc50, ftCreationTime.dwHighDateTime=0x1d74d9d, ftLastAccessTime.dwLowDateTime=0x78695a70, ftLastAccessTime.dwHighDateTime=0x1d7536d, ftLastWriteTime.dwLowDateTime=0x78695a70, ftLastWriteTime.dwHighDateTime=0x1d7536d, nFileSizeHigh=0x0, nFileSizeLow=0x152ff, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="V7HumL1ZZJKoPg.pptx", cAlternateFileName="")) returned 1 [0125.240] PathFindExtensionW (pszPath="v7huml1zzjkopg.pptx") returned=".pptx" [0125.240] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\V7HumL1ZZJKoPg.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\v7huml1zzjkopg.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.240] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.240] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.240] CloseHandle (hObject=0x3d4) returned 1 [0125.242] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1545f) returned 0x3bab170 [0125.244] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\V7HumL1ZZJKoPg.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\v7huml1zzjkopg.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.244] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183848 [0125.246] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.247] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.260] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a09c970, ftCreationTime.dwHighDateTime=0x1d756b4, ftLastAccessTime.dwLowDateTime=0xf39c7ba0, ftLastAccessTime.dwHighDateTime=0x1d756bf, ftLastWriteTime.dwLowDateTime=0xf39c7ba0, ftLastWriteTime.dwHighDateTime=0x1d756bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="xrLE3K2Z6t5MdWjRU", cAlternateFileName="")) returned 1 [0125.260] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e180 [0125.260] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183848 [0125.260] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x11838c0 [0125.260] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d4 [0125.262] CloseHandle (hObject=0x3d4) returned 1 [0125.262] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c0) returned 1 [0125.267] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x94) returned 0x11838c0 [0125.268] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.279] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c0) returned 1 [0125.279] WriteFile (in: hFile=0x3d4, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.281] CloseHandle (hObject=0x3d4) returned 1 [0125.281] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa58b1cb0, ftCreationTime.dwHighDateTime=0x1d753c1, ftLastAccessTime.dwLowDateTime=0x5e58cbd0, ftLastAccessTime.dwHighDateTime=0x1d75d30, ftLastWriteTime.dwLowDateTime=0x5e58cbd0, ftLastWriteTime.dwHighDateTime=0x1d75d30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yHwDb1", cAlternateFileName="")) returned 1 [0125.281] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e140 [0125.281] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x11838c0 [0125.281] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183920 [0125.281] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yhwdb1\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yhwdb1\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d4 [0125.282] CloseHandle (hObject=0x3d4) returned 1 [0125.283] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0125.283] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183920 [0125.283] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yhwdb1\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yhwdb1\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.283] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0125.283] WriteFile (in: hFile=0x3d4, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.286] CloseHandle (hObject=0x3d4) returned 1 [0125.286] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fda32d0, ftCreationTime.dwHighDateTime=0x1d714a2, ftLastAccessTime.dwLowDateTime=0xf60e3640, ftLastAccessTime.dwHighDateTime=0x1d744a8, ftLastWriteTime.dwLowDateTime=0xf60e3640, ftLastWriteTime.dwHighDateTime=0x1d744a8, nFileSizeHigh=0x0, nFileSizeLow=0x9296, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yUtkkx8xYplRS.pptx", cAlternateFileName="")) returned 1 [0125.286] PathFindExtensionW (pszPath="yutkkx8xyplrs.pptx") returned=".pptx" [0125.286] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yUtkkx8xYplRS.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yutkkx8xyplrs.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.286] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.287] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.287] CloseHandle (hObject=0x3d4) returned 1 [0125.287] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x93f6) returned 0x3bab170 [0125.291] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yUtkkx8xYplRS.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yutkkx8xyplrs.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.292] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183920 [0125.293] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.293] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.307] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7688190, ftCreationTime.dwHighDateTime=0x1d72e80, ftLastAccessTime.dwLowDateTime=0x27184910, ftLastAccessTime.dwHighDateTime=0x1d75b60, ftLastWriteTime.dwLowDateTime=0x27184910, ftLastWriteTime.dwHighDateTime=0x1d75b60, nFileSizeHigh=0x0, nFileSizeLow=0x93f6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_6rIiH.xlsx", cAlternateFileName="")) returned 1 [0125.307] PathFindExtensionW (pszPath="_6riih.xlsx") returned=".xlsx" [0125.307] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\_6rIiH.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_6riih.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.307] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.308] ReadFile (in: hFile=0x3d4, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.308] CloseHandle (hObject=0x3d4) returned 1 [0125.308] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9556) returned 0x3bab170 [0125.311] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\_6rIiH.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_6riih.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.311] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183920 [0125.313] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.313] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.327] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7688190, ftCreationTime.dwHighDateTime=0x1d72e80, ftLastAccessTime.dwLowDateTime=0x27184910, ftLastAccessTime.dwHighDateTime=0x1d75b60, ftLastWriteTime.dwLowDateTime=0x27184910, ftLastWriteTime.dwHighDateTime=0x1d75b60, nFileSizeHigh=0x0, nFileSizeLow=0x93f6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_6riih.xlsx", cAlternateFileName="")) returned 0 [0125.327] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.328] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ca0) returned 1 [0125.328] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2b0) returned 1 [0125.328] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\downloads\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.329] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x83771c89, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.331] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83771c89, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83771c89, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83776a03, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.331] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.331] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.331] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.333] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cf8) returned 1 [0125.333] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1f0) returned 1 [0125.333] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.333] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8377b8ab, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.335] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8377b8ab, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8377b8ab, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8378072b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.335] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43053b43, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43053b43, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0125.335] PathFindExtensionW (pszPath="bing.url") returned=".url" [0125.335] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\Bing.url" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\bing.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4 [0125.336] CloseHandle (hObject=0x3d4) returned 1 [0125.336] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x230) returned 0x3bc8718 [0125.337] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\Bing.url" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\bing.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d4 [0125.337] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x1183920 [0125.338] CreateIoCompletionPort (FileHandle=0x3d4, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.338] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.340] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.340] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Links", cAlternateFileName="")) returned 1 [0125.340] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e160 [0125.340] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x56) returned 0x1183988 [0125.340] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x11839e8 [0125.340] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\links\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0125.341] CloseHandle (hObject=0x3d0) returned 1 [0125.341] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839e8) returned 1 [0125.341] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x11839e8 [0125.342] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\links\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.342] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839e8) returned 1 [0125.342] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.343] CloseHandle (hObject=0x3d0) returned 1 [0125.343] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="links", cAlternateFileName="")) returned 0 [0125.344] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.346] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d50) returned 1 [0125.346] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e280) returned 1 [0125.346] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\links\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.346] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x83782de9, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.348] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83782de9, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83782de9, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8378540f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.348] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.348] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0125.348] PathFindExtensionW (pszPath="desktop.lnk") returned=".lnk" [0125.349] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Downloads.lnk", cAlternateFileName="")) returned 1 [0125.349] PathFindExtensionW (pszPath="downloads.lnk") returned=".lnk" [0125.349] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="downloads.lnk", cAlternateFileName="")) returned 0 [0125.349] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.350] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183da0) returned 1 [0125.350] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2a0) returned 1 [0125.350] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.350] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x140d75af, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x8378c96d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.352] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8378c96d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8378c96d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8378f0c8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.352] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x690e5950, ftCreationTime.dwHighDateTime=0x1d758b2, ftLastAccessTime.dwLowDateTime=0x52ecd770, ftLastAccessTime.dwHighDateTime=0x1d75adb, ftLastWriteTime.dwLowDateTime=0x52ecd770, ftLastWriteTime.dwHighDateTime=0x1d75adb, nFileSizeHigh=0x0, nFileSizeLow=0x1004c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="4W2zSw_qyA-iNvZwG.mp3", cAlternateFileName="")) returned 1 [0125.352] PathFindExtensionW (pszPath="4w2zsw_qya-invzwg.mp3") returned=".mp3" [0125.352] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\4W2zSw_qyA-iNvZwG.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\4w2zsw_qya-invzwg.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.352] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.352] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.352] CloseHandle (hObject=0x3d0) returned 1 [0125.353] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x101ac) returned 0x3bab170 [0125.354] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\4W2zSw_qyA-iNvZwG.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\4w2zsw_qya-invzwg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.354] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11839e8 [0125.356] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.356] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.367] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa10d4e90, ftCreationTime.dwHighDateTime=0x1d751c5, ftLastAccessTime.dwLowDateTime=0xa34ac230, ftLastAccessTime.dwHighDateTime=0x1d75bdb, ftLastWriteTime.dwLowDateTime=0xa34ac230, ftLastWriteTime.dwHighDateTime=0x1d75bdb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="7xFaZGGDo2", cAlternateFileName="")) returned 1 [0125.367] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e230 [0125.367] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x11839e8 [0125.367] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183a48 [0125.367] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0125.368] CloseHandle (hObject=0x3d0) returned 1 [0125.369] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.369] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183a48 [0125.369] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.369] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.369] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.372] CloseHandle (hObject=0x3d0) returned 1 [0125.372] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.373] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6288d2f0, ftCreationTime.dwHighDateTime=0x1d758e8, ftLastAccessTime.dwLowDateTime=0xa19a5370, ftLastAccessTime.dwHighDateTime=0x1d75c25, ftLastWriteTime.dwLowDateTime=0xa19a5370, ftLastWriteTime.dwHighDateTime=0x1d75c25, nFileSizeHigh=0x0, nFileSizeLow=0x8dff, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="DlddW4odh7 0R.mp3", cAlternateFileName="")) returned 1 [0125.373] PathFindExtensionW (pszPath="dlddw4odh7 0r.mp3") returned=".mp3" [0125.373] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\DlddW4odh7 0R.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\dlddw4odh7 0r.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.373] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.373] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.373] CloseHandle (hObject=0x3d0) returned 1 [0125.374] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x8f5f) returned 0x3bab170 [0125.374] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\DlddW4odh7 0R.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\dlddw4odh7 0r.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.374] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183a48 [0125.376] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.376] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.387] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb64b1a80, ftCreationTime.dwHighDateTime=0x1d75139, ftLastAccessTime.dwLowDateTime=0x69d52150, ftLastAccessTime.dwHighDateTime=0x1d75247, ftLastWriteTime.dwLowDateTime=0x69d52150, ftLastWriteTime.dwHighDateTime=0x1d75247, nFileSizeHigh=0x0, nFileSizeLow=0x386b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Hy6kK83v326kg.m4a", cAlternateFileName="")) returned 1 [0125.387] PathFindExtensionW (pszPath="hy6kk83v326kg.m4a") returned=".m4a" [0125.387] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\Hy6kK83v326kg.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\hy6kk83v326kg.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.388] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.388] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.388] CloseHandle (hObject=0x3d0) returned 1 [0125.388] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x39cb) returned 0x3bc8950 [0125.389] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\Hy6kK83v326kg.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\hy6kk83v326kg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.389] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183a48 [0125.391] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.391] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.402] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6133c7b0, ftCreationTime.dwHighDateTime=0x1d753ad, ftLastAccessTime.dwLowDateTime=0x8df57f40, ftLastAccessTime.dwHighDateTime=0x1d75bba, ftLastWriteTime.dwLowDateTime=0x8df57f40, ftLastWriteTime.dwHighDateTime=0x1d75bba, nFileSizeHigh=0x0, nFileSizeLow=0x56c8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="I DXBf6fbq5DmIhEE.m4a", cAlternateFileName="")) returned 1 [0125.402] PathFindExtensionW (pszPath="i dxbf6fbq5dmihee.m4a") returned=".m4a" [0125.402] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I DXBf6fbq5DmIhEE.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i dxbf6fbq5dmihee.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.402] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.402] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.403] CloseHandle (hObject=0x3d0) returned 1 [0125.403] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x5828) returned 0x3bc8950 [0125.403] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I DXBf6fbq5DmIhEE.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i dxbf6fbq5dmihee.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.403] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183a48 [0125.405] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.405] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.415] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7fb9030, ftCreationTime.dwHighDateTime=0x1d75621, ftLastAccessTime.dwLowDateTime=0xfeae6c30, ftLastAccessTime.dwHighDateTime=0x1d75d11, ftLastWriteTime.dwLowDateTime=0xfeae6c30, ftLastWriteTime.dwHighDateTime=0x1d75d11, nFileSizeHigh=0x0, nFileSizeLow=0x1535e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="iLGIuAawkATxwUujSc.m4a", cAlternateFileName="")) returned 1 [0125.415] PathFindExtensionW (pszPath="ilgiuaawkatxwuujsc.m4a") returned=".m4a" [0125.415] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\iLGIuAawkATxwUujSc.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ilgiuaawkatxwuujsc.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.415] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.415] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.416] CloseHandle (hObject=0x3d0) returned 1 [0125.416] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x154be) returned 0x3bab170 [0125.526] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\iLGIuAawkATxwUujSc.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ilgiuaawkatxwuujsc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.527] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183a48 [0125.533] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.533] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.545] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02fa8c0, ftCreationTime.dwHighDateTime=0x1d7566c, ftLastAccessTime.dwLowDateTime=0x8a92f310, ftLastAccessTime.dwHighDateTime=0x1d759e8, ftLastWriteTime.dwLowDateTime=0x8a92f310, ftLastWriteTime.dwHighDateTime=0x1d759e8, nFileSizeHigh=0x0, nFileSizeLow=0x15f07, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ipeVoX06U.mp3", cAlternateFileName="")) returned 1 [0125.545] PathFindExtensionW (pszPath="ipevox06u.mp3") returned=".mp3" [0125.545] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\ipeVoX06U.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ipevox06u.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.545] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.545] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.546] CloseHandle (hObject=0x3d0) returned 1 [0125.546] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x16067) returned 0x3bab170 [0125.546] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\ipeVoX06U.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ipevox06u.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.551] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x1183a48 [0125.556] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.556] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.574] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3b9e20, ftCreationTime.dwHighDateTime=0x1d75638, ftLastAccessTime.dwLowDateTime=0x674bbe50, ftLastAccessTime.dwHighDateTime=0x1d75bbe, ftLastWriteTime.dwLowDateTime=0x674bbe50, ftLastWriteTime.dwHighDateTime=0x1d75bbe, nFileSizeHigh=0x0, nFileSizeLow=0xb8a7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="I_EcfLMno5hLsDXInPs.mp3", cAlternateFileName="")) returned 1 [0125.574] PathFindExtensionW (pszPath="i_ecflmno5hlsdxinps.mp3") returned=".mp3" [0125.574] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I_EcfLMno5hLsDXInPs.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i_ecflmno5hlsdxinps.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.575] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.575] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.575] CloseHandle (hObject=0x3d0) returned 1 [0125.575] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xba07) returned 0x3bab170 [0125.576] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I_EcfLMno5hLsDXInPs.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i_ecflmno5hlsdxinps.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.576] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183a48 [0125.578] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.578] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.594] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37137070, ftCreationTime.dwHighDateTime=0x1d74f39, ftLastAccessTime.dwLowDateTime=0x7fcd6180, ftLastAccessTime.dwHighDateTime=0x1d75aac, ftLastWriteTime.dwLowDateTime=0x7fcd6180, ftLastWriteTime.dwHighDateTime=0x1d75aac, nFileSizeHigh=0x0, nFileSizeLow=0xdb91, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="l5AuKPVeEq1.m4a", cAlternateFileName="")) returned 1 [0125.594] PathFindExtensionW (pszPath="l5aukpveeq1.m4a") returned=".m4a" [0125.594] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\l5AuKPVeEq1.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\l5aukpveeq1.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.594] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.594] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.594] CloseHandle (hObject=0x3d0) returned 1 [0125.595] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xdcf1) returned 0x3bab170 [0125.595] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\l5AuKPVeEq1.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\l5aukpveeq1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.595] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183a48 [0125.597] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.597] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.617] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa412a9d0, ftCreationTime.dwHighDateTime=0x1d75c4e, ftLastAccessTime.dwLowDateTime=0x4f1a2900, ftLastAccessTime.dwHighDateTime=0x1d75ca6, ftLastWriteTime.dwLowDateTime=0x4f1a2900, ftLastWriteTime.dwHighDateTime=0x1d75ca6, nFileSizeHigh=0x0, nFileSizeLow=0x14869, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="mjQXCIBoEGsRIXG5UH1.wav", cAlternateFileName="")) returned 1 [0125.617] PathFindExtensionW (pszPath="mjqxciboegsrixg5uh1.wav") returned=".wav" [0125.617] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\mjQXCIBoEGsRIXG5UH1.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\mjqxciboegsrixg5uh1.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.618] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.618] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.618] CloseHandle (hObject=0x3d0) returned 1 [0125.618] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x149c9) returned 0x3bab170 [0125.619] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\mjQXCIBoEGsRIXG5UH1.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\mjqxciboegsrixg5uh1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.619] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183a48 [0125.620] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.620] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.642] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e84ac0, ftCreationTime.dwHighDateTime=0x1d75234, ftLastAccessTime.dwLowDateTime=0xa59f4760, ftLastAccessTime.dwHighDateTime=0x1d75cc9, ftLastWriteTime.dwLowDateTime=0xa59f4760, ftLastWriteTime.dwHighDateTime=0x1d75cc9, nFileSizeHigh=0x0, nFileSizeLow=0xbc9e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="pERp.m4a", cAlternateFileName="")) returned 1 [0125.642] PathFindExtensionW (pszPath="perp.m4a") returned=".m4a" [0125.642] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\pERp.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\perp.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.643] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.643] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.643] CloseHandle (hObject=0x3d0) returned 1 [0125.643] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbdfe) returned 0x3bab170 [0125.643] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\pERp.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\perp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.644] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x52) returned 0x1183a48 [0125.646] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.646] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.654] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4c1c70, ftCreationTime.dwHighDateTime=0x1d7521c, ftLastAccessTime.dwLowDateTime=0xb599cce0, ftLastAccessTime.dwHighDateTime=0x1d7539f, ftLastWriteTime.dwLowDateTime=0xb599cce0, ftLastWriteTime.dwHighDateTime=0x1d7539f, nFileSizeHigh=0x0, nFileSizeLow=0xcc4e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="sp8U4eZ5gjmARGZzERiC.mp3", cAlternateFileName="")) returned 1 [0125.654] PathFindExtensionW (pszPath="sp8u4ez5gjmargzzeric.mp3") returned=".mp3" [0125.654] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\sp8U4eZ5gjmARGZzERiC.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\sp8u4ez5gjmargzzeric.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.654] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.654] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.655] CloseHandle (hObject=0x3d0) returned 1 [0125.655] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xcdae) returned 0x3bab170 [0125.655] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\sp8U4eZ5gjmARGZzERiC.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\sp8u4ez5gjmargzzeric.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.655] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x1183a48 [0125.657] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.657] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x247d99b0, ftCreationTime.dwHighDateTime=0x1d7582e, ftLastAccessTime.dwLowDateTime=0xbc330150, ftLastAccessTime.dwHighDateTime=0x1d75856, ftLastWriteTime.dwLowDateTime=0xbc330150, ftLastWriteTime.dwHighDateTime=0x1d75856, nFileSizeHigh=0x0, nFileSizeLow=0x10cdd, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SynGA4LX.mp3", cAlternateFileName="")) returned 1 [0125.665] PathFindExtensionW (pszPath="synga4lx.mp3") returned=".mp3" [0125.665] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\SynGA4LX.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\synga4lx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0125.665] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.665] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.665] CloseHandle (hObject=0x3d0) returned 1 [0125.666] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10e3d) returned 0x3bab170 [0125.666] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\SynGA4LX.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\synga4lx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0125.666] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x1183a48 [0125.668] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.668] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.689] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda38e750, ftCreationTime.dwHighDateTime=0x1d75478, ftLastAccessTime.dwLowDateTime=0x9cc3f8e0, ftLastAccessTime.dwHighDateTime=0x1d75cf9, ftLastWriteTime.dwLowDateTime=0x9cc3f8e0, ftLastWriteTime.dwHighDateTime=0x1d75cf9, nFileSizeHigh=0x0, nFileSizeLow=0x4714, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="tmjvG4lm-mwGUnkAQc.wav", cAlternateFileName="")) returned 1 [0125.689] PathFindExtensionW (pszPath="tmjvg4lm-mwgunkaqc.wav") returned=".wav" [0125.689] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\tmjvG4lm-mwGUnkAQc.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\tmjvg4lm-mwgunkaqc.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.689] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.689] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.690] CloseHandle (hObject=0x3d8) returned 1 [0125.690] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4874) returned 0x3bc8950 [0125.690] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\tmjvG4lm-mwGUnkAQc.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\tmjvg4lm-mwgunkaqc.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.690] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183b90 [0125.692] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.692] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.702] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c3fc50, ftCreationTime.dwHighDateTime=0x1d7547b, ftLastAccessTime.dwLowDateTime=0xeb483f40, ftLastAccessTime.dwHighDateTime=0x1d75672, ftLastWriteTime.dwLowDateTime=0xeb483f40, ftLastWriteTime.dwHighDateTime=0x1d75672, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="wk9oyeTx5Wxu-aAZVD.mp3", cAlternateFileName="")) returned 1 [0125.702] PathFindExtensionW (pszPath="wk9oyetx5wxu-aazvd.mp3") returned=".mp3" [0125.702] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\wk9oyeTx5Wxu-aAZVD.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\wk9oyetx5wxu-aazvd.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.702] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.702] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.702] CloseHandle (hObject=0x3d8) returned 1 [0125.703] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x62d) returned 0x3bc8950 [0125.703] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\wk9oyeTx5Wxu-aAZVD.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\wk9oyetx5wxu-aazvd.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.703] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x1183a48 [0125.704] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.704] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.709] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c3fc50, ftCreationTime.dwHighDateTime=0x1d7547b, ftLastAccessTime.dwLowDateTime=0xeb483f40, ftLastAccessTime.dwHighDateTime=0x1d75672, ftLastWriteTime.dwLowDateTime=0xeb483f40, ftLastWriteTime.dwHighDateTime=0x1d75672, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="wk9oyetx5wxu-aazvd.mp3", cAlternateFileName="")) returned 0 [0125.709] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.710] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df0) returned 1 [0125.710] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2e0) returned 1 [0125.710] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\onedrive\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0125.710] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83793f3e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.712] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83793f3e, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83793f3e, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83796531, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.712] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.712] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.713] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0125.714] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e40) returned 1 [0125.714] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2c0) returned 1 [0125.714] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.714] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1454fd1e, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x83798c8b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.716] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea4cd30, ftCreationTime.dwHighDateTime=0x1d75009, ftLastAccessTime.dwLowDateTime=0xf5dc9380, ftLastAccessTime.dwHighDateTime=0x1d756b2, ftLastWriteTime.dwLowDateTime=0xf5dc9380, ftLastWriteTime.dwHighDateTime=0x1d756b2, nFileSizeHigh=0x0, nFileSizeLow=0xb779, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="0GKL.gif", cAlternateFileName="")) returned 1 [0125.716] PathFindExtensionW (pszPath="0gkl.gif") returned=".gif" [0125.716] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\0GKL.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\0gkl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.716] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.716] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.716] CloseHandle (hObject=0x3d8) returned 1 [0125.717] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb8d9) returned 0x3bab170 [0125.718] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\0GKL.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\0gkl.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.718] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x1183a48 [0125.720] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.720] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.728] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83798c8b, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83798c8b, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8379dab5, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.728] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93326630, ftCreationTime.dwHighDateTime=0x1d75638, ftLastAccessTime.dwLowDateTime=0xdaded3d0, ftLastAccessTime.dwHighDateTime=0x1d75b95, ftLastWriteTime.dwLowDateTime=0xdaded3d0, ftLastWriteTime.dwHighDateTime=0x1d75b95, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="6s-A L", cAlternateFileName="")) returned 1 [0125.728] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e220 [0125.728] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x56) returned 0x1183a48 [0125.728] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5c) returned 0x1183aa8 [0125.728] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.729] CloseHandle (hObject=0x3d8) returned 1 [0125.730] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0125.730] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x1183aa8 [0125.730] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.730] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0125.730] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.731] CloseHandle (hObject=0x3d8) returned 1 [0125.732] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab052bd0, ftCreationTime.dwHighDateTime=0x1d75bb5, ftLastAccessTime.dwLowDateTime=0x3230f9f0, ftLastAccessTime.dwHighDateTime=0x1d75cdc, ftLastWriteTime.dwLowDateTime=0x3230f9f0, ftLastWriteTime.dwHighDateTime=0x1d75cdc, nFileSizeHigh=0x0, nFileSizeLow=0x3dd3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="7nDtl1ODTnF.png", cAlternateFileName="")) returned 1 [0125.732] PathFindExtensionW (pszPath="7ndtl1odtnf.png") returned=".png" [0125.732] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\7nDtl1ODTnF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\7ndtl1odtnf.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.732] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.732] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.732] CloseHandle (hObject=0x3d8) returned 1 [0125.732] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x3f33) returned 0x3bc8950 [0125.732] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\7nDtl1ODTnF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\7ndtl1odtnf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.733] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183aa8 [0125.734] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.734] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.739] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Camera Roll", cAlternateFileName="")) returned 1 [0125.739] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1e0 [0125.739] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183aa8 [0125.739] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183b10 [0125.739] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.741] CloseHandle (hObject=0x3d8) returned 1 [0125.741] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b10) returned 1 [0125.741] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183b10 [0125.741] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.741] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b10) returned 1 [0125.741] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.743] CloseHandle (hObject=0x3d8) returned 1 [0125.743] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.743] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee4db590, ftCreationTime.dwHighDateTime=0x1d75c9d, ftLastAccessTime.dwLowDateTime=0x4e2d88d0, ftLastAccessTime.dwHighDateTime=0x1d75cd7, ftLastWriteTime.dwLowDateTime=0x4e2d88d0, ftLastWriteTime.dwHighDateTime=0x1d75cd7, nFileSizeHigh=0x0, nFileSizeLow=0x6109, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Eum-G.png", cAlternateFileName="")) returned 1 [0125.743] PathFindExtensionW (pszPath="eum-g.png") returned=".png" [0125.743] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\Eum-G.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\eum-g.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.743] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.743] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.744] CloseHandle (hObject=0x3d8) returned 1 [0125.744] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x6269) returned 0x3bc8950 [0125.744] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\Eum-G.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\eum-g.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.744] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x1183b10 [0125.745] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.746] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.752] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1120c00, ftCreationTime.dwHighDateTime=0x1d75309, ftLastAccessTime.dwLowDateTime=0xc1002880, ftLastAccessTime.dwHighDateTime=0x1d755df, ftLastWriteTime.dwLowDateTime=0xc1002880, ftLastWriteTime.dwHighDateTime=0x1d755df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="L5IJd4GbQss", cAlternateFileName="")) returned 1 [0125.752] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e210 [0125.752] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x1183b10 [0125.752] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183b78 [0125.752] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.752] CloseHandle (hObject=0x3d8) returned 1 [0125.753] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b78) returned 1 [0125.753] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183b78 [0125.753] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.753] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b78) returned 1 [0125.753] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.755] CloseHandle (hObject=0x3d8) returned 1 [0125.755] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388b8080, ftCreationTime.dwHighDateTime=0x1d754d6, ftLastAccessTime.dwLowDateTime=0xe5180340, ftLastAccessTime.dwHighDateTime=0x1d75b26, ftLastWriteTime.dwLowDateTime=0xe5180340, ftLastWriteTime.dwHighDateTime=0x1d75b26, nFileSizeHigh=0x0, nFileSizeLow=0x52bf, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="pERp6q8YBvJUb0EB.bmp", cAlternateFileName="")) returned 1 [0125.755] PathFindExtensionW (pszPath="perp6q8ybvjub0eb.bmp") returned=".bmp" [0125.756] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pERp6q8YBvJUb0EB.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\perp6q8ybvjub0eb.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.756] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.756] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.756] CloseHandle (hObject=0x3d8) returned 1 [0125.756] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x541f) returned 0x3bc8950 [0125.756] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pERp6q8YBvJUb0EB.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\perp6q8ybvjub0eb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.756] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183b78 [0125.758] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.758] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.766] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80cc7090, ftCreationTime.dwHighDateTime=0x1d74fac, ftLastAccessTime.dwLowDateTime=0x1b2da8d0, ftLastAccessTime.dwHighDateTime=0x1d75bbe, ftLastWriteTime.dwLowDateTime=0x1b2da8d0, ftLastWriteTime.dwHighDateTime=0x1d75bbe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="PIhOSizT0V", cAlternateFileName="")) returned 1 [0125.766] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1f0 [0125.766] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183b78 [0125.766] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183be0 [0125.766] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.772] CloseHandle (hObject=0x3d8) returned 1 [0125.772] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183be0) returned 1 [0125.772] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x84) returned 0x1183be0 [0125.772] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.773] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183be0) returned 1 [0125.773] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.775] CloseHandle (hObject=0x3d8) returned 1 [0125.776] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Saved Pictures", cAlternateFileName="")) returned 1 [0125.776] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e190 [0125.776] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183be0 [0125.776] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183c50 [0125.776] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.777] CloseHandle (hObject=0x3d8) returned 1 [0125.778] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c50) returned 1 [0125.778] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8c) returned 0x1183c50 [0125.778] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.778] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c50) returned 1 [0125.778] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.780] CloseHandle (hObject=0x3d8) returned 1 [0125.780] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34bc1ab0, ftCreationTime.dwHighDateTime=0x1d756d3, ftLastAccessTime.dwLowDateTime=0x6cc636f0, ftLastAccessTime.dwHighDateTime=0x1d7590f, ftLastWriteTime.dwLowDateTime=0x6cc636f0, ftLastWriteTime.dwHighDateTime=0x1d7590f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="XwXyg9HII4", cAlternateFileName="")) returned 1 [0125.780] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e200 [0125.781] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x1183c50 [0125.781] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183cb8 [0125.781] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.781] CloseHandle (hObject=0x3d8) returned 1 [0125.782] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.782] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x84) returned 0x1183cb8 [0125.782] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.782] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.783] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.784] CloseHandle (hObject=0x3d8) returned 1 [0125.784] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f129b50, ftCreationTime.dwHighDateTime=0x1d751e5, ftLastAccessTime.dwLowDateTime=0xf0dbd3a0, ftLastAccessTime.dwHighDateTime=0x1d7540f, ftLastWriteTime.dwLowDateTime=0xf0dbd3a0, ftLastWriteTime.dwHighDateTime=0x1d7540f, nFileSizeHigh=0x0, nFileSizeLow=0x7612, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ZJmAXf_iw1OZ22dUkz.bmp", cAlternateFileName="")) returned 1 [0125.784] PathFindExtensionW (pszPath="zjmaxf_iw1oz22dukz.bmp") returned=".bmp" [0125.784] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\ZJmAXf_iw1OZ22dUkz.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zjmaxf_iw1oz22dukz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.785] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.785] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.785] CloseHandle (hObject=0x3d8) returned 1 [0125.785] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7772) returned 0x3bab170 [0125.785] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\ZJmAXf_iw1OZ22dUkz.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zjmaxf_iw1oz22dukz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.785] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183cb8 [0125.787] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.787] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.794] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f129b50, ftCreationTime.dwHighDateTime=0x1d751e5, ftLastAccessTime.dwLowDateTime=0xf0dbd3a0, ftLastAccessTime.dwHighDateTime=0x1d7540f, ftLastWriteTime.dwLowDateTime=0xf0dbd3a0, ftLastWriteTime.dwHighDateTime=0x1d7540f, nFileSizeHigh=0x0, nFileSizeLow=0x7612, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zjmaxf_iw1oz22dukz.bmp", cAlternateFileName="")) returned 0 [0125.794] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.795] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e90) returned 1 [0125.796] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2f0) returned 1 [0125.796] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\saved games\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.796] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x837a0112, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.797] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837a0112, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x837a0112, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x837a288d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.797] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.798] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.798] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.798] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ee8) returned 1 [0125.799] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2d0) returned 1 [0125.799] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.799] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x837ac904, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.800] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837ac904, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x837ac904, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x837d35da, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.800] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.800] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x437a1142, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Everywhere.search-ms", cAlternateFileName="")) returned 1 [0125.801] PathFindExtensionW (pszPath="everywhere.search-ms") returned=".search-ms" [0125.801] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.802] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.802] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.803] CloseHandle (hObject=0x3d8) returned 1 [0125.803] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x258) returned 0x3bc8950 [0125.803] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0xffffffff [0125.803] RtlGetLastWin32Error () returned 0x5 [0125.804] SetNamedSecurityInfoW () returned 0x0 [0125.804] SetNamedSecurityInfoW () returned 0x0 [0125.806] GetFileAttributesW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms")) returned 0x23 [0125.806] SetFileAttributesW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms", dwFileAttributes=0x80) returned 1 [0125.806] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.806] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183cb8 [0125.808] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.808] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.817] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Indexed Locations.search-ms", cAlternateFileName="")) returned 1 [0125.817] PathFindExtensionW (pszPath="indexed locations.search-ms") returned=".search-ms" [0125.817] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.817] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.817] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.818] CloseHandle (hObject=0x3d8) returned 1 [0125.818] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x258) returned 0x3bc8950 [0125.819] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0xffffffff [0125.819] RtlGetLastWin32Error () returned 0x5 [0125.819] SetNamedSecurityInfoW () returned 0x0 [0125.819] SetNamedSecurityInfoW () returned 0x0 [0125.820] GetFileAttributesW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms")) returned 0x23 [0125.820] SetFileAttributesW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms", dwFileAttributes=0x80) returned 1 [0125.820] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.821] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183cb8 [0125.823] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.823] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.832] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="indexed locations.search-ms", cAlternateFileName="")) returned 0 [0125.832] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0125.833] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183f38) returned 1 [0125.833] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e300) returned 1 [0125.833] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0125.833] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1459c1e0, ftLastAccessTime.dwHighDateTime=0x1d75d32, ftLastWriteTime.dwLowDateTime=0x837d8508, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0125.835] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x837d8508, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x837d8508, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x837dd271, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0125.835] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e9e000, ftCreationTime.dwHighDateTime=0x1d74e85, ftLastAccessTime.dwLowDateTime=0x31224a80, ftLastAccessTime.dwHighDateTime=0x1d75504, ftLastWriteTime.dwLowDateTime=0x31224a80, ftLastWriteTime.dwHighDateTime=0x1d75504, nFileSizeHigh=0x0, nFileSizeLow=0x17b80, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="6i3pxIlMX__X8g3sdibs.swf", cAlternateFileName="")) returned 1 [0125.835] PathFindExtensionW (pszPath="6i3pxilmx__x8g3sdibs.swf") returned=".swf" [0125.835] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\6i3pxIlMX__X8g3sdibs.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\6i3pxilmx__x8g3sdibs.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.836] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.836] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.836] CloseHandle (hObject=0x3d8) returned 1 [0125.836] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x17ce0) returned 0x3bab170 [0125.837] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\6i3pxIlMX__X8g3sdibs.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\6i3pxilmx__x8g3sdibs.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.837] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183cb8 [0125.839] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.839] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.850] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2831990, ftCreationTime.dwHighDateTime=0x1d75223, ftLastAccessTime.dwLowDateTime=0xaf536910, ftLastAccessTime.dwHighDateTime=0x1d7532a, ftLastWriteTime.dwLowDateTime=0xaf536910, ftLastWriteTime.dwHighDateTime=0x1d7532a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="8Boi", cAlternateFileName="")) returned 1 [0125.851] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1a0 [0125.851] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4e) returned 0x1183cb8 [0125.851] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x54) returned 0x1183d10 [0125.851] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.851] CloseHandle (hObject=0x3d8) returned 1 [0125.852] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d10) returned 1 [0125.852] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183d10 [0125.852] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.852] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d10) returned 1 [0125.852] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.854] CloseHandle (hObject=0x3d8) returned 1 [0125.854] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a0e6c0, ftCreationTime.dwHighDateTime=0x1d75ca8, ftLastAccessTime.dwLowDateTime=0xa7a13740, ftLastAccessTime.dwHighDateTime=0x1d75cdc, ftLastWriteTime.dwLowDateTime=0xa7a13740, ftLastWriteTime.dwHighDateTime=0x1d75cdc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="aqP9vRI0BXjoHaPpCIJ", cAlternateFileName="")) returned 1 [0125.854] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e240 [0125.854] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183d10 [0125.854] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x1183d88 [0125.854] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0125.855] CloseHandle (hObject=0x3d8) returned 1 [0125.855] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.855] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x92) returned 0x1183d88 [0125.855] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.856] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.856] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0125.857] CloseHandle (hObject=0x3d8) returned 1 [0125.858] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.858] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eea1b70, ftCreationTime.dwHighDateTime=0x1d7583e, ftLastAccessTime.dwLowDateTime=0x7df0a7d0, ftLastAccessTime.dwHighDateTime=0x1d75b94, ftLastWriteTime.dwLowDateTime=0x7df0a7d0, ftLastWriteTime.dwHighDateTime=0x1d75b94, nFileSizeHigh=0x0, nFileSizeLow=0x30b7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="eDmfBt.swf", cAlternateFileName="")) returned 1 [0125.858] PathFindExtensionW (pszPath="edmfbt.swf") returned=".swf" [0125.858] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\eDmfBt.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\edmfbt.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.858] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.858] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.859] CloseHandle (hObject=0x3d8) returned 1 [0125.859] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x3217) returned 0x3bc8950 [0125.859] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\eDmfBt.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\edmfbt.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.859] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x58) returned 0x1183d88 [0125.861] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.861] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.870] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2047a660, ftCreationTime.dwHighDateTime=0x1d756a8, ftLastAccessTime.dwLowDateTime=0x16680840, ftLastAccessTime.dwHighDateTime=0x1d756cd, ftLastWriteTime.dwLowDateTime=0x16680840, ftLastWriteTime.dwHighDateTime=0x1d756cd, nFileSizeHigh=0x0, nFileSizeLow=0x3bfb, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="JdPv-THV6iu1IxNFOOGg.swf", cAlternateFileName="")) returned 1 [0125.870] PathFindExtensionW (pszPath="jdpv-thv6iu1ixnfoogg.swf") returned=".swf" [0125.870] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JdPv-THV6iu1IxNFOOGg.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jdpv-thv6iu1ixnfoogg.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.871] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.871] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.871] CloseHandle (hObject=0x3d8) returned 1 [0125.871] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x3d5b) returned 0x3bc8950 [0125.871] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JdPv-THV6iu1IxNFOOGg.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jdpv-thv6iu1ixnfoogg.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.872] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183d88 [0125.873] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.874] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.885] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57fcc0a0, ftCreationTime.dwHighDateTime=0x1d758eb, ftLastAccessTime.dwLowDateTime=0x61ac8bd0, ftLastAccessTime.dwHighDateTime=0x1d7592c, ftLastWriteTime.dwLowDateTime=0x61ac8bd0, ftLastWriteTime.dwHighDateTime=0x1d7592c, nFileSizeHigh=0x0, nFileSizeLow=0x4b07, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="JW1N_M9MWCDNminC7_Tm.flv", cAlternateFileName="")) returned 1 [0125.885] PathFindExtensionW (pszPath="jw1n_m9mwcdnminc7_tm.flv") returned=".flv" [0125.886] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JW1N_M9MWCDNminC7_Tm.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jw1n_m9mwcdnminc7_tm.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.886] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.886] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.886] CloseHandle (hObject=0x3d8) returned 1 [0125.886] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4c67) returned 0x3bc8950 [0125.886] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JW1N_M9MWCDNminC7_Tm.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jw1n_m9mwcdnminc7_tm.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.887] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x1183d88 [0125.889] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.889] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.894] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dee760, ftCreationTime.dwHighDateTime=0x1d74f1c, ftLastAccessTime.dwLowDateTime=0xdd4b8a90, ftLastAccessTime.dwHighDateTime=0x1d750bf, ftLastWriteTime.dwLowDateTime=0xdd4b8a90, ftLastWriteTime.dwHighDateTime=0x1d750bf, nFileSizeHigh=0x0, nFileSizeLow=0x15f40, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="LOcjMbS.mp4", cAlternateFileName="")) returned 1 [0125.894] PathFindExtensionW (pszPath="locjmbs.mp4") returned=".mp4" [0125.895] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\LOcjMbS.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\locjmbs.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.895] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.895] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.895] CloseHandle (hObject=0x3d8) returned 1 [0125.895] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x160a0) returned 0x3bab170 [0125.896] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\LOcjMbS.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\locjmbs.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.896] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5a) returned 0x1183d88 [0125.897] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.898] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.908] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad15020, ftCreationTime.dwHighDateTime=0x1d75892, ftLastAccessTime.dwLowDateTime=0xd9faec20, ftLastAccessTime.dwHighDateTime=0x1d75c48, ftLastWriteTime.dwLowDateTime=0xd9faec20, ftLastWriteTime.dwHighDateTime=0x1d75c48, nFileSizeHigh=0x0, nFileSizeLow=0x133f0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Ps_Y7GMrUuhLbnrspS9.mkv", cAlternateFileName="")) returned 1 [0125.908] PathFindExtensionW (pszPath="ps_y7gmruuhlbnrsps9.mkv") returned=".mkv" [0125.908] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\Ps_Y7GMrUuhLbnrspS9.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ps_y7gmruuhlbnrsps9.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.908] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.908] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.908] CloseHandle (hObject=0x3d8) returned 1 [0125.908] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x13550) returned 0x3bab170 [0125.909] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\Ps_Y7GMrUuhLbnrspS9.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ps_y7gmruuhlbnrsps9.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.909] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x1183d88 [0125.910] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.910] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.919] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52f84a0, ftCreationTime.dwHighDateTime=0x1d753c0, ftLastAccessTime.dwLowDateTime=0x3fe14a40, ftLastAccessTime.dwHighDateTime=0x1d75413, ftLastWriteTime.dwLowDateTime=0x3fe14a40, ftLastWriteTime.dwHighDateTime=0x1d75413, nFileSizeHigh=0x0, nFileSizeLow=0x9499, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rOuI.mp4", cAlternateFileName="")) returned 1 [0125.919] PathFindExtensionW (pszPath="roui.mp4") returned=".mp4" [0125.919] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\rOuI.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\roui.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.919] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.920] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.920] CloseHandle (hObject=0x3d8) returned 1 [0125.920] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x95f9) returned 0x3bab170 [0125.920] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\rOuI.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\roui.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.921] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x54) returned 0x1183d88 [0125.922] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.923] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.931] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb5d16f0, ftCreationTime.dwHighDateTime=0x1d75043, ftLastAccessTime.dwLowDateTime=0xc3e185e0, ftLastAccessTime.dwHighDateTime=0x1d75584, ftLastWriteTime.dwLowDateTime=0xc3e185e0, ftLastWriteTime.dwHighDateTime=0x1d75584, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="r_thM75ifbQ0QX.flv", cAlternateFileName="")) returned 1 [0125.931] PathFindExtensionW (pszPath="r_thm75ifbq0qx.flv") returned=".flv" [0125.932] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\r_thM75ifbQ0QX.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\r_thm75ifbq0qx.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.932] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.932] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0125.932] CloseHandle (hObject=0x3d8) returned 1 [0125.932] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x77c) returned 0x3bc8950 [0125.933] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\r_thM75ifbQ0QX.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\r_thm75ifbq0qx.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0125.933] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x1183d88 [0125.934] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0125.934] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.940] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x388b36f0, ftCreationTime.dwHighDateTime=0x1d759fb, ftLastAccessTime.dwLowDateTime=0x93923650, ftLastAccessTime.dwHighDateTime=0x1d75cc3, ftLastWriteTime.dwLowDateTime=0x93923650, ftLastWriteTime.dwHighDateTime=0x1d75cc3, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SEYiJHv2SpL.swf", cAlternateFileName="")) returned 1 [0125.940] PathFindExtensionW (pszPath="seyijhv2spl.swf") returned=".swf" [0125.940] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\SEYiJHv2SpL.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\seyijhv2spl.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0125.940] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0125.940] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.014] CloseHandle (hObject=0x3d8) returned 1 [0126.015] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xab6) returned 0x3bc8950 [0126.015] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\SEYiJHv2SpL.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\seyijhv2spl.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.015] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x62) returned 0x1183d88 [0126.017] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.017] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.022] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0fe9e0, ftCreationTime.dwHighDateTime=0x1d75a4f, ftLastAccessTime.dwLowDateTime=0x6b6360f0, ftLastAccessTime.dwHighDateTime=0x1d75ae3, ftLastWriteTime.dwLowDateTime=0x6b6360f0, ftLastWriteTime.dwHighDateTime=0x1d75ae3, nFileSizeHigh=0x0, nFileSizeLow=0x2438, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="URGZlfZLPhup7rRJYz.avi", cAlternateFileName="")) returned 1 [0126.022] PathFindExtensionW (pszPath="urgzlfzlphup7rrjyz.avi") returned=".avi" [0126.022] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\URGZlfZLPhup7rRJYz.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\urgzlfzlphup7rrjyz.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.022] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.022] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.023] CloseHandle (hObject=0x3d8) returned 1 [0126.023] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2598) returned 0x3bc8950 [0126.023] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\URGZlfZLPhup7rRJYz.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\urgzlfzlphup7rrjyz.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.023] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x1183d88 [0126.025] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.026] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.035] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43ad2c0, ftCreationTime.dwHighDateTime=0x1d75879, ftLastAccessTime.dwLowDateTime=0x7f28da40, ftLastAccessTime.dwHighDateTime=0x1d75992, ftLastWriteTime.dwLowDateTime=0x7f28da40, ftLastWriteTime.dwHighDateTime=0x1d75992, nFileSizeHigh=0x0, nFileSizeLow=0x15b37, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="wJiV5gVOmgxd.avi", cAlternateFileName="")) returned 1 [0126.035] PathFindExtensionW (pszPath="wjiv5gvomgxd.avi") returned=".avi" [0126.035] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\wJiV5gVOmgxd.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wjiv5gvomgxd.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.035] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.036] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.036] CloseHandle (hObject=0x3d8) returned 1 [0126.036] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x15c97) returned 0x3bab170 [0126.036] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\wJiV5gVOmgxd.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wjiv5gvomgxd.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.036] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x64) returned 0x1183d88 [0126.038] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.038] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.051] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2faff5b0, ftCreationTime.dwHighDateTime=0x1d7541b, ftLastAccessTime.dwLowDateTime=0x54d18b80, ftLastAccessTime.dwHighDateTime=0x1d75581, ftLastWriteTime.dwLowDateTime=0x54d18b80, ftLastWriteTime.dwHighDateTime=0x1d75581, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="xamTr_oYu_mgpHD.swf", cAlternateFileName="")) returned 1 [0126.051] PathFindExtensionW (pszPath="xamtr_oyu_mgphd.swf") returned=".swf" [0126.051] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\xamTr_oYu_mgpHD.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\xamtr_oyu_mgphd.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.051] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.051] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.052] CloseHandle (hObject=0x3d8) returned 1 [0126.052] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x116d) returned 0x3bc8950 [0126.052] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\xamTr_oYu_mgpHD.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\xamtr_oyu_mgphd.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.052] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x1183d88 [0126.054] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.054] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.066] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2faff5b0, ftCreationTime.dwHighDateTime=0x1d7541b, ftLastAccessTime.dwLowDateTime=0x54d18b80, ftLastAccessTime.dwHighDateTime=0x1d75581, ftLastWriteTime.dwLowDateTime=0x54d18b80, ftLastWriteTime.dwHighDateTime=0x1d75581, nFileSizeHigh=0x0, nFileSizeLow=0x100d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="xamtr_oyu_mgphd.swf", cAlternateFileName="")) returned 0 [0126.066] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.067] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0126.067] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1d0) returned 1 [0126.067] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.067] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc74ce6c0, ftCreationTime.dwHighDateTime=0x1d751e7, ftLastAccessTime.dwLowDateTime=0xe3400d30, ftLastAccessTime.dwHighDateTime=0x1d7534a, ftLastWriteTime.dwLowDateTime=0x83a5a6e3, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.069] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75f5a40, ftCreationTime.dwHighDateTime=0x1d74d9c, ftLastAccessTime.dwLowDateTime=0xf6b26200, ftLastAccessTime.dwHighDateTime=0x1d7571e, ftLastWriteTime.dwLowDateTime=0xf6b26200, ftLastWriteTime.dwHighDateTime=0x1d7571e, nFileSizeHigh=0x0, nFileSizeLow=0x14c1, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="-umSa-sI5gifEmW.swf", cAlternateFileName="")) returned 1 [0126.069] PathFindExtensionW (pszPath="-umsa-si5gifemw.swf") returned=".swf" [0126.069] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umSa-sI5gifEmW.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umsa-si5gifemw.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.069] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.069] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.069] CloseHandle (hObject=0x3d8) returned 1 [0126.070] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1621) returned 0x3bc8950 [0126.070] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umSa-sI5gifEmW.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umsa-si5gifemw.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.070] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183d88 [0126.072] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.072] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.076] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a5a6e3, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83a5a6e3, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83a5f55e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.076] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89785f30, ftCreationTime.dwHighDateTime=0x1d753f1, ftLastAccessTime.dwLowDateTime=0x1b47cca0, ftLastAccessTime.dwHighDateTime=0x1d75741, ftLastWriteTime.dwLowDateTime=0x1b47cca0, ftLastWriteTime.dwHighDateTime=0x1d75741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ke1A65Mkp", cAlternateFileName="")) returned 1 [0126.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2d0 [0126.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x1183d88 [0126.076] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x1183e00 [0126.077] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0126.077] CloseHandle (hObject=0x3d8) returned 1 [0126.077] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.077] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x92) returned 0x1183e00 [0126.077] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.078] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.078] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.079] CloseHandle (hObject=0x3d8) returned 1 [0126.079] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360f5f50, ftCreationTime.dwHighDateTime=0x1d759ec, ftLastAccessTime.dwLowDateTime=0xce4bad60, ftLastAccessTime.dwHighDateTime=0x1d75a18, ftLastWriteTime.dwLowDateTime=0xce4bad60, ftLastWriteTime.dwHighDateTime=0x1d75a18, nFileSizeHigh=0x0, nFileSizeLow=0x5ba0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="tCX_RN2xF9X.png", cAlternateFileName="")) returned 1 [0126.080] PathFindExtensionW (pszPath="tcx_rn2xf9x.png") returned=".png" [0126.080] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tCX_RN2xF9X.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tcx_rn2xf9x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.080] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.080] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.080] CloseHandle (hObject=0x3d8) returned 1 [0126.081] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x5d00) returned 0x3bc8950 [0126.081] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tCX_RN2xF9X.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tcx_rn2xf9x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.081] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x76) returned 0x1183e00 [0126.083] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.083] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.095] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe156a760, ftCreationTime.dwHighDateTime=0x1d75113, ftLastAccessTime.dwLowDateTime=0x100e9cd0, ftLastAccessTime.dwHighDateTime=0x1d75604, ftLastWriteTime.dwLowDateTime=0x100e9cd0, ftLastWriteTime.dwHighDateTime=0x1d75604, nFileSizeHigh=0x0, nFileSizeLow=0x14c50, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ulYmM-fmul26.pps", cAlternateFileName="")) returned 1 [0126.095] PathFindExtensionW (pszPath="ulymm-fmul26.pps") returned=".pps" [0126.095] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulYmM-fmul26.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulymm-fmul26.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.095] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.095] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.095] CloseHandle (hObject=0x3d8) returned 1 [0126.096] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x14db0) returned 0x3bab170 [0126.096] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulYmM-fmul26.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulymm-fmul26.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.096] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x1183e00 [0126.098] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.098] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.107] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d0fb60, ftCreationTime.dwHighDateTime=0x1d74ce5, ftLastAccessTime.dwLowDateTime=0x5570a2a0, ftLastAccessTime.dwHighDateTime=0x1d75479, ftLastWriteTime.dwLowDateTime=0x5570a2a0, ftLastWriteTime.dwHighDateTime=0x1d75479, nFileSizeHigh=0x0, nFileSizeLow=0xe964, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Vi3giADhSuv oRP.pps", cAlternateFileName="")) returned 1 [0126.107] PathFindExtensionW (pszPath="vi3giadhsuv orp.pps") returned=".pps" [0126.108] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\Vi3giADhSuv oRP.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\vi3giadhsuv orp.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.108] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.108] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.108] CloseHandle (hObject=0x3d8) returned 1 [0126.108] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xeac4) returned 0x3bab170 [0126.108] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\Vi3giADhSuv oRP.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\vi3giadhsuv orp.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.109] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183e00 [0126.110] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.110] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.119] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269c8bc0, ftCreationTime.dwHighDateTime=0x1d751d0, ftLastAccessTime.dwLowDateTime=0x44786ad0, ftLastAccessTime.dwHighDateTime=0x1d75cb4, ftLastWriteTime.dwLowDateTime=0x44786ad0, ftLastWriteTime.dwHighDateTime=0x1d75cb4, nFileSizeHigh=0x0, nFileSizeLow=0x1810e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="z0cY.flv", cAlternateFileName="")) returned 1 [0126.119] PathFindExtensionW (pszPath="z0cy.flv") returned=".flv" [0126.119] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cY.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cy.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.119] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.119] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.120] CloseHandle (hObject=0x3d8) returned 1 [0126.120] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1826e) returned 0x3bab170 [0126.121] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cY.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cy.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.121] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x1183e00 [0126.123] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.123] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.135] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269c8bc0, ftCreationTime.dwHighDateTime=0x1d751d0, ftLastAccessTime.dwLowDateTime=0x44786ad0, ftLastAccessTime.dwHighDateTime=0x1d75cb4, ftLastWriteTime.dwLowDateTime=0x44786ad0, ftLastWriteTime.dwHighDateTime=0x1d75cb4, nFileSizeHigh=0x0, nFileSizeLow=0x1810e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="z0cy.flv", cAlternateFileName="")) returned 0 [0126.136] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.137] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0126.137] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e270) returned 1 [0126.137] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.137] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2b7b3f0, ftCreationTime.dwHighDateTime=0x1d7548f, ftLastAccessTime.dwLowDateTime=0xb56baa00, ftLastAccessTime.dwHighDateTime=0x1d756aa, ftLastWriteTime.dwLowDateTime=0x83c5feee, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.138] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79dd0570, ftCreationTime.dwHighDateTime=0x1d75951, ftLastAccessTime.dwLowDateTime=0x55d55e70, ftLastAccessTime.dwHighDateTime=0x1d75bf9, ftLastWriteTime.dwLowDateTime=0x55d55e70, ftLastWriteTime.dwHighDateTime=0x1d75bf9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1OUV", cAlternateFileName="")) returned 1 [0126.138] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e290 [0126.138] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x1183648 [0126.138] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11836b8 [0126.139] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d8 [0126.139] CloseHandle (hObject=0x3d8) returned 1 [0126.140] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.140] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8c) returned 0x1183e00 [0126.140] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.140] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.140] WriteFile (in: hFile=0x3d8, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.141] CloseHandle (hObject=0x3d8) returned 1 [0126.142] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c5feee, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x83c5feee, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x83c69c8b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.142] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d9d240, ftCreationTime.dwHighDateTime=0x1d75211, ftLastAccessTime.dwLowDateTime=0x1c72edb0, ftLastAccessTime.dwHighDateTime=0x1d75987, ftLastWriteTime.dwLowDateTime=0x1c72edb0, ftLastWriteTime.dwHighDateTime=0x1d75987, nFileSizeHigh=0x0, nFileSizeLow=0xbf74, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="5H4kyoh3O.mp3", cAlternateFileName="")) returned 1 [0126.142] PathFindExtensionW (pszPath="5h4kyoh3o.mp3") returned=".mp3" [0126.142] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5H4kyoh3O.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5h4kyoh3o.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.142] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.142] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.142] CloseHandle (hObject=0x3d8) returned 1 [0126.143] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc0d4) returned 0x3bab170 [0126.143] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5H4kyoh3O.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5h4kyoh3o.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.143] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x76) returned 0x11836b8 [0126.145] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.145] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.153] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54f90c0, ftCreationTime.dwHighDateTime=0x1d75bcb, ftLastAccessTime.dwLowDateTime=0xdf524f20, ftLastAccessTime.dwHighDateTime=0x1d75c88, ftLastWriteTime.dwLowDateTime=0xdf524f20, ftLastWriteTime.dwHighDateTime=0x1d75c88, nFileSizeHigh=0x0, nFileSizeLow=0x18349, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="cRCLA-_5U24a-.flv", cAlternateFileName="")) returned 1 [0126.153] PathFindExtensionW (pszPath="crcla-_5u24a-.flv") returned=".flv" [0126.153] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\cRCLA-_5U24a-.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\crcla-_5u24a-.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.153] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.153] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.154] CloseHandle (hObject=0x3d8) returned 1 [0126.154] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x184a9) returned 0x3bab170 [0126.154] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\cRCLA-_5U24a-.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\crcla-_5u24a-.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.154] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183e00 [0126.156] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.156] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.166] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e41d60, ftCreationTime.dwHighDateTime=0x1d74cd1, ftLastAccessTime.dwLowDateTime=0x6c57b700, ftLastAccessTime.dwHighDateTime=0x1d75588, ftLastWriteTime.dwLowDateTime=0x6c57b700, ftLastWriteTime.dwHighDateTime=0x1d75588, nFileSizeHigh=0x0, nFileSizeLow=0x1e0e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="w1Vdv.m4a", cAlternateFileName="")) returned 1 [0126.166] PathFindExtensionW (pszPath="w1vdv.m4a") returned=".m4a" [0126.166] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1Vdv.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1vdv.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.167] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.167] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.167] CloseHandle (hObject=0x3d8) returned 1 [0126.167] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1f6e) returned 0x3bc8950 [0126.167] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1Vdv.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1vdv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.168] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.169] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.169] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.174] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e41d60, ftCreationTime.dwHighDateTime=0x1d74cd1, ftLastAccessTime.dwLowDateTime=0x6c57b700, ftLastAccessTime.dwHighDateTime=0x1d75588, ftLastWriteTime.dwLowDateTime=0x6c57b700, ftLastWriteTime.dwHighDateTime=0x1d75588, nFileSizeHigh=0x0, nFileSizeLow=0x1e0e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="w1vdv.m4a", cAlternateFileName="")) returned 0 [0126.174] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.175] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0126.176] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e170) returned 1 [0126.176] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.176] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x84135c9f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84135c9f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84135c9f, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84135c9f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8413a956, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.177] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x878917cb, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="achoo@gdllo.de.pst", cAlternateFileName="")) returned 1 [0126.177] PathFindExtensionW (pszPath="achoo@gdllo.de.pst") returned=".pst" [0126.178] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8 [0126.178] SetFilePointerEx (in: hFile=0x3d8, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.178] ReadFile (in: hFile=0x3d8, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.179] CloseHandle (hObject=0x3d8) returned 1 [0126.179] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x42560) returned 0x3aca4a0 [0126.185] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d8 [0126.185] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8a) returned 0x1183e00 [0126.187] CreateIoCompletionPort (FileHandle=0x3d8, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.187] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3aca4a0) returned 1 [0126.188] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x878917cb, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="achoo@gdllo.de.pst", cAlternateFileName="")) returned 0 [0126.188] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.189] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0126.189] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e180) returned 1 [0126.189] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.190] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a09c970, ftCreationTime.dwHighDateTime=0x1d756b4, ftLastAccessTime.dwLowDateTime=0xf39c7ba0, ftLastAccessTime.dwHighDateTime=0x1d756bf, ftLastWriteTime.dwLowDateTime=0x84273a1e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.191] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8425b09f, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8425b09f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8427650a, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.191] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62203a0, ftCreationTime.dwHighDateTime=0x1d75a3e, ftLastAccessTime.dwLowDateTime=0x302a4610, ftLastAccessTime.dwHighDateTime=0x1d75b7f, ftLastWriteTime.dwLowDateTime=0x302a4610, ftLastWriteTime.dwHighDateTime=0x1d75b7f, nFileSizeHigh=0x0, nFileSizeLow=0x93b0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="H8NI-Y-.docx", cAlternateFileName="")) returned 1 [0126.191] PathFindExtensionW (pszPath="h8ni-y-.docx") returned=".docx" [0126.191] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\H8NI-Y-.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\h8ni-y-.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.191] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.192] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.192] CloseHandle (hObject=0x3d0) returned 1 [0126.192] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9510) returned 0x3bab170 [0126.192] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\H8NI-Y-.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\h8ni-y-.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.192] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x11837d8 [0126.194] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.194] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.200] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7058270, ftCreationTime.dwHighDateTime=0x1d75c86, ftLastAccessTime.dwLowDateTime=0x81534390, ftLastAccessTime.dwHighDateTime=0x1d75d30, ftLastWriteTime.dwLowDateTime=0x81534390, ftLastWriteTime.dwHighDateTime=0x1d75d30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="tEmgrn", cAlternateFileName="")) returned 1 [0126.200] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e270 [0126.200] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x11837d8 [0126.200] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x82) returned 0x1183e98 [0126.200] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0126.201] CloseHandle (hObject=0x3d0) returned 1 [0126.201] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.201] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa2) returned 0x1183e98 [0126.201] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.202] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.202] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.203] CloseHandle (hObject=0x3d0) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7058270, ftCreationTime.dwHighDateTime=0x1d75c86, ftLastAccessTime.dwLowDateTime=0x81534390, ftLastAccessTime.dwHighDateTime=0x1d75d30, ftLastWriteTime.dwLowDateTime=0x81534390, ftLastWriteTime.dwHighDateTime=0x1d75d30, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="temgrn", cAlternateFileName="")) returned 0 [0126.203] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.204] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c0) returned 1 [0126.204] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e140) returned 1 [0126.204] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yhwdb1\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.205] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa58b1cb0, ftCreationTime.dwHighDateTime=0x1d753c1, ftLastAccessTime.dwLowDateTime=0x5e58cbd0, ftLastAccessTime.dwHighDateTime=0x1d75d30, ftLastWriteTime.dwLowDateTime=0x8427650a, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8427650a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8427650a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8428816b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8427650a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8427650a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8428816b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 0 [0126.206] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.207] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.207] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e160) returned 1 [0126.207] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\links\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.207] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8430ce29, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8430f511, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8430f511, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8430f511, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x843143a6, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0126.209] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.210] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839e8) returned 1 [0126.210] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e230) returned 1 [0126.210] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.210] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa10d4e90, ftCreationTime.dwHighDateTime=0x1d751c5, ftLastAccessTime.dwLowDateTime=0xa34ac230, ftLastAccessTime.dwHighDateTime=0x1d75bdb, ftLastWriteTime.dwLowDateTime=0x843513f7, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db16da0, ftCreationTime.dwHighDateTime=0x1d75a84, ftLastAccessTime.dwLowDateTime=0xd5bcd5f0, ftLastAccessTime.dwHighDateTime=0x1d75ad7, ftLastWriteTime.dwLowDateTime=0xd5bcd5f0, ftLastWriteTime.dwHighDateTime=0x1d75ad7, nFileSizeHigh=0x0, nFileSizeLow=0x2a48, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="-hjTYqk.mp3", cAlternateFileName="")) returned 1 [0126.212] PathFindExtensionW (pszPath="-hjtyqk.mp3") returned=".mp3" [0126.212] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjTYqk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjtyqk.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.212] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.212] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.212] CloseHandle (hObject=0x3d0) returned 1 [0126.213] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2ba8) returned 0x3bc8950 [0126.213] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjTYqk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjtyqk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.213] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.215] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.215] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843513f7, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x843513f7, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8435b15b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9bc9770, ftCreationTime.dwHighDateTime=0x1d75a5c, ftLastAccessTime.dwLowDateTime=0xbeb66b40, ftLastAccessTime.dwHighDateTime=0x1d75ba0, ftLastWriteTime.dwLowDateTime=0xbeb66b40, ftLastWriteTime.dwHighDateTime=0x1d75ba0, nFileSizeHigh=0x0, nFileSizeLow=0x173e2, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="8PzcWGW.m4a", cAlternateFileName="")) returned 1 [0126.220] PathFindExtensionW (pszPath="8pzcwgw.m4a") returned=".m4a" [0126.220] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8PzcWGW.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8pzcwgw.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.220] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.220] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.221] CloseHandle (hObject=0x3d0) returned 1 [0126.221] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x17542) returned 0x3bab170 [0126.221] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8PzcWGW.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8pzcwgw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.221] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.223] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.223] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.236] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3197e470, ftCreationTime.dwHighDateTime=0x1d7588d, ftLastAccessTime.dwLowDateTime=0xc3769890, ftLastAccessTime.dwHighDateTime=0x1d75b36, ftLastWriteTime.dwLowDateTime=0xc3769890, ftLastWriteTime.dwHighDateTime=0x1d75b36, nFileSizeHigh=0x0, nFileSizeLow=0xb95b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="BX1wR y6hvbH4sIC-7v.mp3", cAlternateFileName="")) returned 1 [0126.236] PathFindExtensionW (pszPath="bx1wr y6hvbh4sic-7v.mp3") returned=".mp3" [0126.236] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\BX1wR y6hvbH4sIC-7v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\bx1wr y6hvbh4sic-7v.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.236] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.236] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.236] CloseHandle (hObject=0x3d0) returned 1 [0126.237] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbabb) returned 0x3bab170 [0126.239] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\BX1wR y6hvbH4sIC-7v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\bx1wr y6hvbh4sic-7v.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.240] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183988 [0126.242] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.242] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.251] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb34bc20, ftCreationTime.dwHighDateTime=0x1d7574e, ftLastAccessTime.dwLowDateTime=0x2fda89a0, ftLastAccessTime.dwHighDateTime=0x1d757b4, ftLastWriteTime.dwLowDateTime=0x2fda89a0, ftLastWriteTime.dwHighDateTime=0x1d757b4, nFileSizeHigh=0x0, nFileSizeLow=0x181e0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="F27AcbA_RY_-woTi6.mp3", cAlternateFileName="")) returned 1 [0126.251] PathFindExtensionW (pszPath="f27acba_ry_-woti6.mp3") returned=".mp3" [0126.251] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\F27AcbA_RY_-woTi6.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\f27acba_ry_-woti6.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.251] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.251] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.251] CloseHandle (hObject=0x3d0) returned 1 [0126.252] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x18340) returned 0x3bab170 [0126.254] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\F27AcbA_RY_-woTi6.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\f27acba_ry_-woti6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.254] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x82) returned 0x1183988 [0126.256] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.256] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.266] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4d2aee0, ftCreationTime.dwHighDateTime=0x1d75bc0, ftLastAccessTime.dwLowDateTime=0x9c42fa50, ftLastAccessTime.dwHighDateTime=0x1d75cff, ftLastWriteTime.dwLowDateTime=0x9c42fa50, ftLastWriteTime.dwHighDateTime=0x1d75cff, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="GA5oxL-.m4a", cAlternateFileName="")) returned 1 [0126.267] PathFindExtensionW (pszPath="ga5oxl-.m4a") returned=".m4a" [0126.267] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\GA5oxL-.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ga5oxl-.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.267] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.267] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.267] CloseHandle (hObject=0x3d0) returned 1 [0126.267] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1a99) returned 0x3bc8950 [0126.268] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\GA5oxL-.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ga5oxl-.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.269] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.271] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.271] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.275] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53215710, ftCreationTime.dwHighDateTime=0x1d751ea, ftLastAccessTime.dwLowDateTime=0xe4987720, ftLastAccessTime.dwHighDateTime=0x1d75be3, ftLastWriteTime.dwLowDateTime=0xe4987720, ftLastWriteTime.dwHighDateTime=0x1d75be3, nFileSizeHigh=0x0, nFileSizeLow=0x14624, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="gdr194tG.m4a", cAlternateFileName="")) returned 1 [0126.275] PathFindExtensionW (pszPath="gdr194tg.m4a") returned=".m4a" [0126.276] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tG.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tg.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.276] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.276] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.276] CloseHandle (hObject=0x3d0) returned 1 [0126.276] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x14784) returned 0x3bab170 [0126.278] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tG.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.278] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11836b8 [0126.280] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.280] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.288] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9fc2e70, ftCreationTime.dwHighDateTime=0x1d74f80, ftLastAccessTime.dwLowDateTime=0x260578d0, ftLastAccessTime.dwHighDateTime=0x1d75c79, ftLastWriteTime.dwLowDateTime=0x260578d0, ftLastWriteTime.dwHighDateTime=0x1d75c79, nFileSizeHigh=0x0, nFileSizeLow=0x1076e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="gTpR4bHCjaGhqviGa-e.m4a", cAlternateFileName="")) returned 1 [0126.288] PathFindExtensionW (pszPath="gtpr4bhcjaghqviga-e.m4a") returned=".m4a" [0126.288] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gTpR4bHCjaGhqviGa-e.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gtpr4bhcjaghqviga-e.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.288] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.288] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.288] CloseHandle (hObject=0x3dc) returned 1 [0126.288] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x108ce) returned 0x3b0ca08 [0126.291] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gTpR4bHCjaGhqviGa-e.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gtpr4bhcjaghqviga-e.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.291] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183988 [0126.293] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.293] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.308] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26816940, ftCreationTime.dwHighDateTime=0x1d7588c, ftLastAccessTime.dwLowDateTime=0x3c359d70, ftLastAccessTime.dwHighDateTime=0x1d75b10, ftLastWriteTime.dwLowDateTime=0x3c359d70, ftLastWriteTime.dwHighDateTime=0x1d75b10, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="JDuNSpuPCB9nrCX1hxhf.m4a", cAlternateFileName="")) returned 1 [0126.308] PathFindExtensionW (pszPath="jdunspupcb9nrcx1hxhf.m4a") returned=".m4a" [0126.308] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JDuNSpuPCB9nrCX1hxhf.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jdunspupcb9nrcx1hxhf.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.308] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.308] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.308] CloseHandle (hObject=0x3dc) returned 1 [0126.309] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x21f2) returned 0x3bc8950 [0126.309] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JDuNSpuPCB9nrCX1hxhf.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jdunspupcb9nrcx1hxhf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.309] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x88) returned 0x1183988 [0126.311] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.311] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.317] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf41840, ftCreationTime.dwHighDateTime=0x1d75bb6, ftLastAccessTime.dwLowDateTime=0x5e7c01c0, ftLastAccessTime.dwHighDateTime=0x1d75c60, ftLastWriteTime.dwLowDateTime=0x5e7c01c0, ftLastWriteTime.dwHighDateTime=0x1d75c60, nFileSizeHigh=0x0, nFileSizeLow=0x8c16, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="JGznrvkEEvxn00.wav", cAlternateFileName="")) returned 1 [0126.317] PathFindExtensionW (pszPath="jgznrvkeevxn00.wav") returned=".wav" [0126.317] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JGznrvkEEvxn00.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jgznrvkeevxn00.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.318] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.318] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.318] CloseHandle (hObject=0x3dc) returned 1 [0126.318] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x8d76) returned 0x3bab170 [0126.319] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JGznrvkEEvxn00.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jgznrvkeevxn00.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.319] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x1183988 [0126.320] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.320] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.331] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa54d0560, ftCreationTime.dwHighDateTime=0x1d75489, ftLastAccessTime.dwLowDateTime=0x3948f820, ftLastAccessTime.dwHighDateTime=0x1d75cad, ftLastWriteTime.dwLowDateTime=0x3948f820, ftLastWriteTime.dwHighDateTime=0x1d75cad, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="leot2gmJs.m4a", cAlternateFileName="")) returned 1 [0126.331] PathFindExtensionW (pszPath="leot2gmjs.m4a") returned=".m4a" [0126.331] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmJs.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmjs.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.331] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.331] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.331] CloseHandle (hObject=0x3dc) returned 1 [0126.331] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1163) returned 0x3bc8950 [0126.332] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmJs.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmjs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.332] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x11836b8 [0126.333] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.333] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.341] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8ccbb0, ftCreationTime.dwHighDateTime=0x1d75485, ftLastAccessTime.dwLowDateTime=0x8e37d180, ftLastAccessTime.dwHighDateTime=0x1d7591f, ftLastWriteTime.dwLowDateTime=0x8e37d180, ftLastWriteTime.dwHighDateTime=0x1d7591f, nFileSizeHigh=0x0, nFileSizeLow=0x1860a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="lSPgMK9.wav", cAlternateFileName="")) returned 1 [0126.341] PathFindExtensionW (pszPath="lspgmk9.wav") returned=".wav" [0126.341] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lSPgMK9.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lspgmk9.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.342] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.342] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.342] CloseHandle (hObject=0x3dc) returned 1 [0126.342] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1876a) returned 0x3bab170 [0126.343] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lSPgMK9.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lspgmk9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.343] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.344] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.344] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.355] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb7c3f50, ftCreationTime.dwHighDateTime=0x1d74d30, ftLastAccessTime.dwLowDateTime=0x66fe8fb0, ftLastAccessTime.dwHighDateTime=0x1d751ad, ftLastWriteTime.dwLowDateTime=0x66fe8fb0, ftLastWriteTime.dwHighDateTime=0x1d751ad, nFileSizeHigh=0x0, nFileSizeLow=0xa912, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="O1uOZTDu.mp3", cAlternateFileName="")) returned 1 [0126.356] PathFindExtensionW (pszPath="o1uoztdu.mp3") returned=".mp3" [0126.356] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\O1uOZTDu.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\o1uoztdu.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.356] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.356] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.356] CloseHandle (hObject=0x3dc) returned 1 [0126.356] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xaa72) returned 0x3bab170 [0126.358] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\O1uOZTDu.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\o1uoztdu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.359] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11836b8 [0126.360] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.360] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.370] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7031b70, ftCreationTime.dwHighDateTime=0x1d74d99, ftLastAccessTime.dwLowDateTime=0xb20913e0, ftLastAccessTime.dwHighDateTime=0x1d75211, ftLastWriteTime.dwLowDateTime=0xb20913e0, ftLastWriteTime.dwHighDateTime=0x1d75211, nFileSizeHigh=0x0, nFileSizeLow=0xfd74, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="RH8_sB7GO_faGWB.m4a", cAlternateFileName="")) returned 1 [0126.370] PathFindExtensionW (pszPath="rh8_sb7go_fagwb.m4a") returned=".m4a" [0126.370] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\RH8_sB7GO_faGWB.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\rh8_sb7go_fagwb.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.371] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.371] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.371] CloseHandle (hObject=0x3dc) returned 1 [0126.371] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xfed4) returned 0x3bab170 [0126.371] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\RH8_sB7GO_faGWB.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\rh8_sb7go_fagwb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.372] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183988 [0126.374] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.374] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.382] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4252e0, ftCreationTime.dwHighDateTime=0x1d75283, ftLastAccessTime.dwLowDateTime=0x4dcbac70, ftLastAccessTime.dwHighDateTime=0x1d75c58, ftLastWriteTime.dwLowDateTime=0x4dcbac70, ftLastWriteTime.dwHighDateTime=0x1d75c58, nFileSizeHigh=0x0, nFileSizeLow=0x78e3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ufBNll.m4a", cAlternateFileName="")) returned 1 [0126.382] PathFindExtensionW (pszPath="ufbnll.m4a") returned=".m4a" [0126.382] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufBNll.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufbnll.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.383] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.383] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.383] CloseHandle (hObject=0x3dc) returned 1 [0126.383] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7a43) returned 0x3bab170 [0126.384] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufBNll.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufbnll.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.385] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11836b8 [0126.386] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.386] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.392] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69a64d0, ftCreationTime.dwHighDateTime=0x1d758da, ftLastAccessTime.dwLowDateTime=0xc74d4b20, ftLastAccessTime.dwHighDateTime=0x1d75a1a, ftLastWriteTime.dwLowDateTime=0xc74d4b20, ftLastWriteTime.dwHighDateTime=0x1d75a1a, nFileSizeHigh=0x0, nFileSizeLow=0xab00, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="wxGAE7Dj.wav", cAlternateFileName="")) returned 1 [0126.392] PathFindExtensionW (pszPath="wxgae7dj.wav") returned=".wav" [0126.392] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxGAE7Dj.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxgae7dj.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.392] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.392] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.392] CloseHandle (hObject=0x3dc) returned 1 [0126.393] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xac60) returned 0x3bab170 [0126.393] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxGAE7Dj.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxgae7dj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.393] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11836b8 [0126.394] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.395] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.401] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed1f520, ftCreationTime.dwHighDateTime=0x1d75778, ftLastAccessTime.dwLowDateTime=0xf859bc90, ftLastAccessTime.dwHighDateTime=0x1d758e3, ftLastWriteTime.dwLowDateTime=0xf859bc90, ftLastWriteTime.dwHighDateTime=0x1d758e3, nFileSizeHigh=0x0, nFileSizeLow=0x7436, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Y_pSjsnzlmt uLUc.mp3", cAlternateFileName="")) returned 1 [0126.401] PathFindExtensionW (pszPath="y_psjsnzlmt uluc.mp3") returned=".mp3" [0126.401] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\Y_pSjsnzlmt uLUc.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\y_psjsnzlmt uluc.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.401] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.401] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.402] CloseHandle (hObject=0x3dc) returned 1 [0126.402] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7596) returned 0x3bc8950 [0126.402] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\Y_pSjsnzlmt uLUc.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\y_psjsnzlmt uluc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.403] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x80) returned 0x1183988 [0126.404] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.404] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.409] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf32d9a0, ftCreationTime.dwHighDateTime=0x1d75816, ftLastAccessTime.dwLowDateTime=0x8d22c400, ftLastAccessTime.dwHighDateTime=0x1d75b0c, ftLastWriteTime.dwLowDateTime=0x8d22c400, ftLastWriteTime.dwHighDateTime=0x1d75b0c, nFileSizeHigh=0x0, nFileSizeLow=0xf3ce, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zbzN Mww_Bkx.wav", cAlternateFileName="")) returned 1 [0126.409] PathFindExtensionW (pszPath="zbzn mww_bkx.wav") returned=".wav" [0126.409] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzN Mww_Bkx.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzn mww_bkx.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.409] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.409] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.410] CloseHandle (hObject=0x3dc) returned 1 [0126.410] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xf52e) returned 0x3bab170 [0126.410] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzN Mww_Bkx.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzn mww_bkx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.410] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x117c978 [0126.412] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.412] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.423] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96bf2d0, ftCreationTime.dwHighDateTime=0x1d74fea, ftLastAccessTime.dwLowDateTime=0x985972e0, ftLastAccessTime.dwHighDateTime=0x1d75753, ftLastWriteTime.dwLowDateTime=0x985972e0, ftLastWriteTime.dwHighDateTime=0x1d75753, nFileSizeHigh=0x0, nFileSizeLow=0xffc8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zpUSLDdQvFXBODSYNS-w.m4a", cAlternateFileName="")) returned 1 [0126.424] PathFindExtensionW (pszPath="zpuslddqvfxbodsyns-w.m4a") returned=".m4a" [0126.424] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpUSLDdQvFXBODSYNS-w.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpuslddqvfxbodsyns-w.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.424] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.424] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.424] CloseHandle (hObject=0x3dc) returned 1 [0126.425] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10128) returned 0x3bab170 [0126.428] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpUSLDdQvFXBODSYNS-w.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpuslddqvfxbodsyns-w.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.428] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x88) returned 0x1183988 [0126.430] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.430] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.442] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96bf2d0, ftCreationTime.dwHighDateTime=0x1d74fea, ftLastAccessTime.dwLowDateTime=0x985972e0, ftLastAccessTime.dwHighDateTime=0x1d75753, ftLastWriteTime.dwLowDateTime=0x985972e0, ftLastWriteTime.dwHighDateTime=0x1d75753, nFileSizeHigh=0x0, nFileSizeLow=0xffc8, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zpuslddqvfxbodsyns-w.m4a", cAlternateFileName="")) returned 0 [0126.442] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.443] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0126.443] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e220) returned 1 [0126.443] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.443] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93326630, ftCreationTime.dwHighDateTime=0x1d75638, ftLastAccessTime.dwLowDateTime=0xdaded3d0, ftLastAccessTime.dwHighDateTime=0x1d75b95, ftLastWriteTime.dwLowDateTime=0x846c2c51, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.445] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846c2c51, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x846c2c51, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x846c7af4, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.445] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacaf3a50, ftCreationTime.dwHighDateTime=0x1d75b5d, ftLastAccessTime.dwLowDateTime=0xa2e0c9a0, ftLastAccessTime.dwHighDateTime=0x1d75c87, ftLastWriteTime.dwLowDateTime=0xa2e0c9a0, ftLastWriteTime.dwHighDateTime=0x1d75c87, nFileSizeHigh=0x0, nFileSizeLow=0x8f08, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="2UmmY.bmp", cAlternateFileName="")) returned 1 [0126.445] PathFindExtensionW (pszPath="2ummy.bmp") returned=".bmp" [0126.445] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2UmmY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2ummy.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.446] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.446] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.446] CloseHandle (hObject=0x3dc) returned 1 [0126.446] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9068) returned 0x3bab170 [0126.454] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2UmmY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2ummy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.457] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x11836b8 [0126.459] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.459] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.471] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41bc3d40, ftCreationTime.dwHighDateTime=0x1d74f5c, ftLastAccessTime.dwLowDateTime=0x56c45ba0, ftLastAccessTime.dwHighDateTime=0x1d7506f, ftLastWriteTime.dwLowDateTime=0x56c45ba0, ftLastWriteTime.dwHighDateTime=0x1d7506f, nFileSizeHigh=0x0, nFileSizeLow=0x16264, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="B-TyRFGPPXknyiuqW.png", cAlternateFileName="")) returned 1 [0126.471] PathFindExtensionW (pszPath="b-tyrfgppxknyiuqw.png") returned=".png" [0126.471] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\B-TyRFGPPXknyiuqW.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\b-tyrfgppxknyiuqw.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.471] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.471] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.471] CloseHandle (hObject=0x3dc) returned 1 [0126.472] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x163c4) returned 0x3bab170 [0126.473] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\B-TyRFGPPXknyiuqW.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\b-tyrfgppxknyiuqw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.473] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x80) returned 0x1183860 [0126.475] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.475] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.488] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac90e0, ftCreationTime.dwHighDateTime=0x1d75314, ftLastAccessTime.dwLowDateTime=0x68eacd00, ftLastAccessTime.dwHighDateTime=0x1d75a79, ftLastWriteTime.dwLowDateTime=0x68eacd00, ftLastWriteTime.dwHighDateTime=0x1d75a79, nFileSizeHigh=0x0, nFileSizeLow=0x154e0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="IaTgbd.png", cAlternateFileName="")) returned 1 [0126.488] PathFindExtensionW (pszPath="iatgbd.png") returned=".png" [0126.489] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\IaTgbd.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\iatgbd.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.489] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.489] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.489] CloseHandle (hObject=0x3dc) returned 1 [0126.489] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x15640) returned 0x3bab170 [0126.491] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\IaTgbd.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\iatgbd.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.491] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x11836b8 [0126.493] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.493] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.507] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6168b0, ftCreationTime.dwHighDateTime=0x1d755df, ftLastAccessTime.dwLowDateTime=0x289d8140, ftLastAccessTime.dwHighDateTime=0x1d75c57, ftLastWriteTime.dwLowDateTime=0x289d8140, ftLastWriteTime.dwHighDateTime=0x1d75c57, nFileSizeHigh=0x0, nFileSizeLow=0xe207, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="kQUblf2Z.gif", cAlternateFileName="")) returned 1 [0126.507] PathFindExtensionW (pszPath="kqublf2z.gif") returned=".gif" [0126.508] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kQUblf2Z.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kqublf2z.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.508] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.508] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.508] CloseHandle (hObject=0x3dc) returned 1 [0126.508] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xe367) returned 0x3bab170 [0126.510] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kQUblf2Z.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kqublf2z.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.510] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.512] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.512] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.527] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b7ef050, ftCreationTime.dwHighDateTime=0x1d752d5, ftLastAccessTime.dwLowDateTime=0x56cd3a30, ftLastAccessTime.dwHighDateTime=0x1d7536d, ftLastWriteTime.dwLowDateTime=0x56cd3a30, ftLastWriteTime.dwHighDateTime=0x1d7536d, nFileSizeHigh=0x0, nFileSizeLow=0x114b3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rbdcx.bmp", cAlternateFileName="")) returned 1 [0126.527] PathFindExtensionW (pszPath="rbdcx.bmp") returned=".bmp" [0126.528] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.528] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.528] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.528] CloseHandle (hObject=0x3dc) returned 1 [0126.528] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x11613) returned 0x3bab170 [0126.531] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.531] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x68) returned 0x11836b8 [0126.533] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.533] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.552] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b7ef050, ftCreationTime.dwHighDateTime=0x1d752d5, ftLastAccessTime.dwLowDateTime=0x56cd3a30, ftLastAccessTime.dwHighDateTime=0x1d7536d, ftLastWriteTime.dwLowDateTime=0x56cd3a30, ftLastWriteTime.dwHighDateTime=0x1d7536d, nFileSizeHigh=0x0, nFileSizeLow=0x114b3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rbdcx.bmp", cAlternateFileName="")) returned 0 [0126.552] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.553] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0126.553] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1e0) returned 1 [0126.553] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.553] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x846dd6a8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x846dd6a8, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.555] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846dd6a8, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x846dd6a8, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x846e259c, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.555] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.555] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0126.555] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.556] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b10) returned 1 [0126.556] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e210) returned 1 [0126.556] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.556] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1120c00, ftCreationTime.dwHighDateTime=0x1d75309, ftLastAccessTime.dwLowDateTime=0xc1002880, ftLastAccessTime.dwHighDateTime=0x1d755df, ftLastWriteTime.dwLowDateTime=0x846f5f47, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.558] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846f5f47, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x846f5f47, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x846ff9ed, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.558] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806370f0, ftCreationTime.dwHighDateTime=0x1d7502d, ftLastAccessTime.dwLowDateTime=0x78772150, ftLastAccessTime.dwHighDateTime=0x1d754c6, ftLastWriteTime.dwLowDateTime=0x78772150, ftLastWriteTime.dwHighDateTime=0x1d754c6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="4yBkstu5b2", cAlternateFileName="")) returned 1 [0126.558] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e250 [0126.558] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x76) returned 0x117cbf8 [0126.558] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x1183860 [0126.558] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3dc [0126.559] CloseHandle (hObject=0x3dc) returned 1 [0126.560] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0126.560] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x1183860 [0126.560] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0126.562] WriteFile (in: hFile=0x3dc, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.563] CloseHandle (hObject=0x3dc) returned 1 [0126.564] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c5f300, ftCreationTime.dwHighDateTime=0x1d74f90, ftLastAccessTime.dwLowDateTime=0xd82a3ca0, ftLastAccessTime.dwHighDateTime=0x1d7556a, ftLastWriteTime.dwLowDateTime=0xd82a3ca0, ftLastWriteTime.dwHighDateTime=0x1d7556a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="TFfVXSH5nLXSRC89WN", cAlternateFileName="")) returned 1 [0126.564] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2f0 [0126.564] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183860 [0126.564] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8c) returned 0x1183988 [0126.564] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3dc [0126.565] CloseHandle (hObject=0x3dc) returned 1 [0126.565] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.565] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xac) returned 0x1183988 [0126.565] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.566] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.566] WriteFile (in: hFile=0x3dc, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.567] CloseHandle (hObject=0x3dc) returned 1 [0126.568] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x206ce4d0, ftCreationTime.dwHighDateTime=0x1d751ca, ftLastAccessTime.dwLowDateTime=0xedbcc550, ftLastAccessTime.dwHighDateTime=0x1d7586d, ftLastWriteTime.dwLowDateTime=0xedbcc550, ftLastWriteTime.dwHighDateTime=0x1d7586d, nFileSizeHigh=0x0, nFileSizeLow=0x1474, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ufzBZ.gif", cAlternateFileName="")) returned 1 [0126.568] PathFindExtensionW (pszPath="ufzbz.gif") returned=".gif" [0126.568] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzBZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzbz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.568] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.568] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.568] CloseHandle (hObject=0x3dc) returned 1 [0126.569] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x15d4) returned 0x3bc8950 [0126.569] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzBZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzbz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.570] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x72) returned 0x117ca78 [0126.573] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.573] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.578] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb52920, ftCreationTime.dwHighDateTime=0x1d7526d, ftLastAccessTime.dwLowDateTime=0x72011760, ftLastAccessTime.dwHighDateTime=0x1d75514, ftLastWriteTime.dwLowDateTime=0x72011760, ftLastWriteTime.dwHighDateTime=0x1d75514, nFileSizeHigh=0x0, nFileSizeLow=0x1ce2, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Yapy.png", cAlternateFileName="")) returned 1 [0126.578] PathFindExtensionW (pszPath="yapy.png") returned=".png" [0126.578] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\Yapy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\yapy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.578] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.579] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.579] CloseHandle (hObject=0x3dc) returned 1 [0126.579] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1e42) returned 0x3bc8950 [0126.579] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\Yapy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\yapy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.579] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11836b8 [0126.581] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.581] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.592] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb52920, ftCreationTime.dwHighDateTime=0x1d7526d, ftLastAccessTime.dwLowDateTime=0x72011760, ftLastAccessTime.dwHighDateTime=0x1d75514, ftLastWriteTime.dwLowDateTime=0x72011760, ftLastWriteTime.dwHighDateTime=0x1d75514, nFileSizeHigh=0x0, nFileSizeLow=0x1ce2, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yapy.png", cAlternateFileName="")) returned 0 [0126.592] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.593] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b78) returned 1 [0126.593] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1f0) returned 1 [0126.593] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.594] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80cc7090, ftCreationTime.dwHighDateTime=0x1d74fac, ftLastAccessTime.dwLowDateTime=0x1b2da8d0, ftLastAccessTime.dwHighDateTime=0x1d75bbe, ftLastWriteTime.dwLowDateTime=0x8472bab6, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.595] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8472bab6, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8472bab6, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84733166, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.595] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e42ee60, ftCreationTime.dwHighDateTime=0x1d74da9, ftLastAccessTime.dwLowDateTime=0x9f4fe860, ftLastAccessTime.dwHighDateTime=0x1d7586e, ftLastWriteTime.dwLowDateTime=0x9f4fe860, ftLastWriteTime.dwHighDateTime=0x1d7586e, nFileSizeHigh=0x0, nFileSizeLow=0xb4e5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="5JyH.jpg", cAlternateFileName="")) returned 1 [0126.595] PathFindExtensionW (pszPath="5jyh.jpg") returned=".jpg" [0126.595] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5JyH.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5jyh.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.595] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.596] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.596] CloseHandle (hObject=0x3dc) returned 1 [0126.596] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb645) returned 0x3bab170 [0126.597] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5JyH.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5jyh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.598] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.600] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.600] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.608] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde8e1ab0, ftCreationTime.dwHighDateTime=0x1d75828, ftLastAccessTime.dwLowDateTime=0xe0761b40, ftLastAccessTime.dwHighDateTime=0x1d7593e, ftLastWriteTime.dwLowDateTime=0xe0761b40, ftLastWriteTime.dwHighDateTime=0x1d7593e, nFileSizeHigh=0x0, nFileSizeLow=0xd161, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="i7llpv9MXtjEu6M.jpg", cAlternateFileName="")) returned 1 [0126.608] PathFindExtensionW (pszPath="i7llpv9mxtjeu6m.jpg") returned=".jpg" [0126.608] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9MXtjEu6M.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9mxtjeu6m.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.608] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.608] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.609] CloseHandle (hObject=0x3dc) returned 1 [0126.609] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xd2c1) returned 0x3bab170 [0126.610] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9MXtjEu6M.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9mxtjeu6m.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.610] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x84) returned 0x1183988 [0126.612] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.612] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.623] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e8780, ftCreationTime.dwHighDateTime=0x1d753af, ftLastAccessTime.dwLowDateTime=0x84258770, ftLastAccessTime.dwHighDateTime=0x1d75bb1, ftLastWriteTime.dwLowDateTime=0x84258770, ftLastWriteTime.dwHighDateTime=0x1d75bb1, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rsAG.gif", cAlternateFileName="")) returned 1 [0126.623] PathFindExtensionW (pszPath="rsag.gif") returned=".gif" [0126.623] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsAG.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsag.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.623] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.623] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.623] CloseHandle (hObject=0x3dc) returned 1 [0126.623] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1a53) returned 0x3bc8950 [0126.624] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsAG.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsag.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.624] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6e) returned 0x11836b8 [0126.625] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.625] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.631] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e8780, ftCreationTime.dwHighDateTime=0x1d753af, ftLastAccessTime.dwLowDateTime=0x84258770, ftLastAccessTime.dwHighDateTime=0x1d75bb1, ftLastWriteTime.dwLowDateTime=0x84258770, ftLastWriteTime.dwHighDateTime=0x1d75bb1, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rsag.gif", cAlternateFileName="")) returned 0 [0126.631] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.633] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183be0) returned 1 [0126.633] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e190) returned 1 [0126.634] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.634] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x847380ca, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x847380ca, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.641] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847380ca, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x847380ca, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8473cc2e, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.641] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0126.641] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0126.641] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c50) returned 1 [0126.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0126.643] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.643] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34bc1ab0, ftCreationTime.dwHighDateTime=0x1d756d3, ftLastAccessTime.dwLowDateTime=0x6cc636f0, ftLastAccessTime.dwHighDateTime=0x1d7590f, ftLastWriteTime.dwLowDateTime=0x847419b1, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.644] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847419b1, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x847419b1, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8474674b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.644] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ce6c9f0, ftCreationTime.dwHighDateTime=0x1d74f41, ftLastAccessTime.dwLowDateTime=0x19fa120, ftLastAccessTime.dwHighDateTime=0x1d75c40, ftLastWriteTime.dwLowDateTime=0x19fa120, ftLastWriteTime.dwHighDateTime=0x1d75c40, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="7b9CAu6t30Ew", cAlternateFileName="")) returned 1 [0126.644] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e150 [0126.644] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x117cef8 [0126.644] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183988 [0126.644] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3dc [0126.645] CloseHandle (hObject=0x3dc) returned 1 [0126.645] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.645] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9e) returned 0x1183988 [0126.645] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.646] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.646] WriteFile (in: hFile=0x3dc, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.647] CloseHandle (hObject=0x3dc) returned 1 [0126.647] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42a7dc0, ftCreationTime.dwHighDateTime=0x1d759c0, ftLastAccessTime.dwLowDateTime=0x8c7c16b0, ftLastAccessTime.dwHighDateTime=0x1d759ee, ftLastWriteTime.dwLowDateTime=0x8c7c16b0, ftLastWriteTime.dwHighDateTime=0x1d759ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="CsZ_z9WGNzb_JAPb", cAlternateFileName="")) returned 1 [0126.647] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e160 [0126.647] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x80) returned 0x1183988 [0126.647] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x86) returned 0x1183a10 [0126.647] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3dc [0126.648] CloseHandle (hObject=0x3dc) returned 1 [0126.648] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.648] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa6) returned 0x1183a10 [0126.648] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.649] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.649] WriteFile (in: hFile=0x3dc, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0126.650] CloseHandle (hObject=0x3dc) returned 1 [0126.650] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751830, ftCreationTime.dwHighDateTime=0x1d74f79, ftLastAccessTime.dwLowDateTime=0xd9dfd910, ftLastAccessTime.dwHighDateTime=0x1d755b0, ftLastWriteTime.dwLowDateTime=0xd9dfd910, ftLastWriteTime.dwHighDateTime=0x1d755b0, nFileSizeHigh=0x0, nFileSizeLow=0xc62a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="IIuKhqW.gif", cAlternateFileName="")) returned 1 [0126.650] PathFindExtensionW (pszPath="iiukhqw.gif") returned=".gif" [0126.650] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\IIuKhqW.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\iiukhqw.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.650] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.650] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.651] CloseHandle (hObject=0x3dc) returned 1 [0126.651] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc78a) returned 0x3bab170 [0126.652] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\IIuKhqW.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\iiukhqw.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.652] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x74) returned 0x117cb78 [0126.654] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.654] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.661] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a038700, ftCreationTime.dwHighDateTime=0x1d750a3, ftLastAccessTime.dwLowDateTime=0xea2bb020, ftLastAccessTime.dwHighDateTime=0x1d75d1f, ftLastWriteTime.dwLowDateTime=0xea2bb020, ftLastWriteTime.dwHighDateTime=0x1d75d1f, nFileSizeHigh=0x0, nFileSizeLow=0xad7b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Y_Xs 4xskgupJwFhAzLH.bmp", cAlternateFileName="")) returned 1 [0126.661] PathFindExtensionW (pszPath="y_xs 4xskgupjwfhazlh.bmp") returned=".bmp" [0126.661] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\Y_Xs 4xskgupJwFhAzLH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\y_xs 4xskgupjwfhazlh.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.661] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.662] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.662] CloseHandle (hObject=0x3dc) returned 1 [0126.662] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xaedb) returned 0x3bab170 [0126.663] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\Y_Xs 4xskgupJwFhAzLH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\y_xs 4xskgupjwfhazlh.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.664] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8e) returned 0x1183a10 [0126.665] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.665] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.671] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a038700, ftCreationTime.dwHighDateTime=0x1d750a3, ftLastAccessTime.dwLowDateTime=0xea2bb020, ftLastAccessTime.dwHighDateTime=0x1d75d1f, ftLastWriteTime.dwLowDateTime=0xea2bb020, ftLastWriteTime.dwHighDateTime=0x1d75d1f, nFileSizeHigh=0x0, nFileSizeLow=0xad7b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="y_xs 4xskgupjwfhazlh.bmp", cAlternateFileName="")) returned 0 [0126.671] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.672] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0126.672] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1a0) returned 1 [0126.672] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.673] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2831990, ftCreationTime.dwHighDateTime=0x1d75223, ftLastAccessTime.dwLowDateTime=0xaf536910, ftLastAccessTime.dwHighDateTime=0x1d7532a, ftLastWriteTime.dwLowDateTime=0x847eceb0, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.674] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847eceb0, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x847eceb0, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x847f1588, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.674] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x944107e0, ftCreationTime.dwHighDateTime=0x1d74cf4, ftLastAccessTime.dwLowDateTime=0xab00ccb0, ftLastAccessTime.dwHighDateTime=0x1d75049, ftLastWriteTime.dwLowDateTime=0xab00ccb0, ftLastWriteTime.dwHighDateTime=0x1d75049, nFileSizeHigh=0x0, nFileSizeLow=0x6f0b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="9avvUOE8E13XW.mp4", cAlternateFileName="")) returned 1 [0126.674] PathFindExtensionW (pszPath="9avvuoe8e13xw.mp4") returned=".mp4" [0126.674] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvUOE8E13XW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvuoe8e13xw.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.674] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.674] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.674] CloseHandle (hObject=0x3dc) returned 1 [0126.675] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x706b) returned 0x3bc8950 [0126.675] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvUOE8E13XW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvuoe8e13xw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.676] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x70) returned 0x11ffa00 [0126.677] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.677] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.686] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc862b2d0, ftCreationTime.dwHighDateTime=0x1d75bc7, ftLastAccessTime.dwLowDateTime=0x9191b900, ftLastAccessTime.dwHighDateTime=0x1d75bdf, ftLastWriteTime.dwLowDateTime=0x9191b900, ftLastWriteTime.dwHighDateTime=0x1d75bdf, nFileSizeHigh=0x0, nFileSizeLow=0x84fc, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="9YyfpISvoY2vb57M.avi", cAlternateFileName="")) returned 1 [0126.686] PathFindExtensionW (pszPath="9yyfpisvoy2vb57m.avi") returned=".avi" [0126.686] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9YyfpISvoY2vb57M.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9yyfpisvoy2vb57m.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.686] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.686] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.686] CloseHandle (hObject=0x3dc) returned 1 [0126.687] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x865c) returned 0x3bab170 [0126.687] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9YyfpISvoY2vb57M.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9yyfpisvoy2vb57m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.687] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x76) returned 0x117c8f8 [0126.688] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.688] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.698] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62968870, ftCreationTime.dwHighDateTime=0x1d75d23, ftLastAccessTime.dwLowDateTime=0x9626da90, ftLastAccessTime.dwHighDateTime=0x1d75d29, ftLastWriteTime.dwLowDateTime=0x9626da90, ftLastWriteTime.dwHighDateTime=0x1d75d29, nFileSizeHigh=0x0, nFileSizeLow=0x1786a, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="AfS_.mp4", cAlternateFileName="")) returned 1 [0126.698] PathFindExtensionW (pszPath="afs_.mp4") returned=".mp4" [0126.698] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\AfS_.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\afs_.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.698] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.699] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.699] CloseHandle (hObject=0x3dc) returned 1 [0126.699] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x179ca) returned 0x3bab170 [0126.700] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\AfS_.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\afs_.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.700] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x5e) returned 0x11836b8 [0126.702] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.702] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.714] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27417930, ftCreationTime.dwHighDateTime=0x1d7538f, ftLastAccessTime.dwLowDateTime=0xa8248410, ftLastAccessTime.dwHighDateTime=0x1d758d6, ftLastWriteTime.dwLowDateTime=0xa8248410, ftLastWriteTime.dwHighDateTime=0x1d758d6, nFileSizeHigh=0x0, nFileSizeLow=0x5636, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="fCAhoT3_1e71to2Wm.avi", cAlternateFileName="")) returned 1 [0126.714] PathFindExtensionW (pszPath="fcahot3_1e71to2wm.avi") returned=".avi" [0126.714] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fCAhoT3_1e71to2Wm.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fcahot3_1e71to2wm.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.715] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.715] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.715] CloseHandle (hObject=0x3dc) returned 1 [0126.715] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x5796) returned 0x3bc8950 [0126.716] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fCAhoT3_1e71to2Wm.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fcahot3_1e71to2wm.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.717] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x78) returned 0x117caf8 [0126.719] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.719] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.724] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b995280, ftCreationTime.dwHighDateTime=0x1d75b61, ftLastAccessTime.dwLowDateTime=0xd9bbc730, ftLastAccessTime.dwHighDateTime=0x1d75cbf, ftLastWriteTime.dwLowDateTime=0xd9bbc730, ftLastWriteTime.dwHighDateTime=0x1d75cbf, nFileSizeHigh=0x0, nFileSizeLow=0x14fbe, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Kf2M4.mkv", cAlternateFileName="")) returned 1 [0126.724] PathFindExtensionW (pszPath="kf2m4.mkv") returned=".mkv" [0126.725] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\Kf2M4.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kf2m4.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.725] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.725] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.725] CloseHandle (hObject=0x3dc) returned 1 [0126.725] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1511e) returned 0x3bab170 [0126.727] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\Kf2M4.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kf2m4.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.727] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x11836b8 [0126.729] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.729] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.741] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732cb8d0, ftCreationTime.dwHighDateTime=0x1d75be8, ftLastAccessTime.dwLowDateTime=0x33015ca0, ftLastAccessTime.dwHighDateTime=0x1d75c08, ftLastWriteTime.dwLowDateTime=0x33015ca0, ftLastWriteTime.dwHighDateTime=0x1d75c08, nFileSizeHigh=0x0, nFileSizeLow=0x10e01, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="kzDOkTC6Kdq.swf", cAlternateFileName="")) returned 1 [0126.741] PathFindExtensionW (pszPath="kzdoktc6kdq.swf") returned=".swf" [0126.741] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzDOkTC6Kdq.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzdoktc6kdq.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.741] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.741] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.742] CloseHandle (hObject=0x3dc) returned 1 [0126.742] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10f61) returned 0x3bab170 [0126.745] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzDOkTC6Kdq.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzdoktc6kdq.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.745] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6c) returned 0x11ffaf0 [0126.747] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.747] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.763] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64f43940, ftCreationTime.dwHighDateTime=0x1d75a8b, ftLastAccessTime.dwLowDateTime=0x28d912c0, ftLastAccessTime.dwHighDateTime=0x1d75c9b, ftLastWriteTime.dwLowDateTime=0x28d912c0, ftLastWriteTime.dwHighDateTime=0x1d75c9b, nFileSizeHigh=0x0, nFileSizeLow=0x18ac4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="OIMFe7MA.swf", cAlternateFileName="")) returned 1 [0126.763] PathFindExtensionW (pszPath="oimfe7ma.swf") returned=".swf" [0126.763] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\OIMFe7MA.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\oimfe7ma.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.763] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.763] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.764] CloseHandle (hObject=0x3dc) returned 1 [0126.764] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x18c24) returned 0x3bab170 [0126.765] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\OIMFe7MA.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\oimfe7ma.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.766] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x66) returned 0x11836b8 [0126.767] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.767] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.779] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1052e890, ftCreationTime.dwHighDateTime=0x1d75c35, ftLastAccessTime.dwLowDateTime=0xa30e9460, ftLastAccessTime.dwHighDateTime=0x1d75c5b, ftLastWriteTime.dwLowDateTime=0xa30e9460, ftLastWriteTime.dwHighDateTime=0x1d75c5b, nFileSizeHigh=0x0, nFileSizeLow=0xc954, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="urEwLAVDg6.mp4", cAlternateFileName="")) returned 1 [0126.780] PathFindExtensionW (pszPath="urewlavdg6.mp4") returned=".mp4" [0126.780] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urEwLAVDg6.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urewlavdg6.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.780] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.780] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.780] CloseHandle (hObject=0x3dc) returned 1 [0126.781] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xcab4) returned 0x3bab170 [0126.782] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urEwLAVDg6.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urewlavdg6.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.782] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x6a) returned 0x11ffa00 [0126.784] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.784] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.792] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1052e890, ftCreationTime.dwHighDateTime=0x1d75c35, ftLastAccessTime.dwLowDateTime=0xa30e9460, ftLastAccessTime.dwHighDateTime=0x1d75c5b, ftLastWriteTime.dwLowDateTime=0xa30e9460, ftLastWriteTime.dwHighDateTime=0x1d75c5b, nFileSizeHigh=0x0, nFileSizeLow=0xc954, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="urewlavdg6.mp4", cAlternateFileName="")) returned 0 [0126.792] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0126.793] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d10) returned 1 [0126.793] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e240) returned 1 [0126.793] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.793] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7a0e6c0, ftCreationTime.dwHighDateTime=0x1d75ca8, ftLastAccessTime.dwLowDateTime=0xa7a13740, ftLastAccessTime.dwHighDateTime=0x1d75cdc, ftLastWriteTime.dwLowDateTime=0x847f66b9, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.795] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97eb720, ftCreationTime.dwHighDateTime=0x1d75174, ftLastAccessTime.dwLowDateTime=0x26037330, ftLastAccessTime.dwHighDateTime=0x1d75a9b, ftLastWriteTime.dwLowDateTime=0x26037330, ftLastWriteTime.dwHighDateTime=0x1d75a9b, nFileSizeHigh=0x0, nFileSizeLow=0x11fee, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="0wjnewtJwvVY4a.flv", cAlternateFileName="")) returned 1 [0126.795] PathFindExtensionW (pszPath="0wjnewtjwvvy4a.flv") returned=".flv" [0126.795] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtJwvVY4a.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtjwvvy4a.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.795] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.795] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.795] CloseHandle (hObject=0x3dc) returned 1 [0126.796] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1214e) returned 0x3bab170 [0126.797] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtJwvVY4a.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtjwvvy4a.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.797] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x90) returned 0x1183a10 [0126.799] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.799] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.826] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847f66b9, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x847f66b9, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x847fb17b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.826] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7823c0, ftCreationTime.dwHighDateTime=0x1d75745, ftLastAccessTime.dwLowDateTime=0x1023eae0, ftLastAccessTime.dwHighDateTime=0x1d75c99, ftLastWriteTime.dwLowDateTime=0x1023eae0, ftLastWriteTime.dwHighDateTime=0x1d75c99, nFileSizeHigh=0x0, nFileSizeLow=0x68c7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="8SOP.mp4", cAlternateFileName="")) returned 1 [0126.827] PathFindExtensionW (pszPath="8sop.mp4") returned=".mp4" [0126.827] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8SOP.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8sop.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.827] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.827] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.827] CloseHandle (hObject=0x3dc) returned 1 [0126.827] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x6a27) returned 0x3bc8950 [0126.829] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8SOP.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8sop.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.829] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x1183a10 [0126.835] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.835] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.848] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb22a30, ftCreationTime.dwHighDateTime=0x1d75a5e, ftLastAccessTime.dwLowDateTime=0x4d84b760, ftLastAccessTime.dwHighDateTime=0x1d75c63, ftLastWriteTime.dwLowDateTime=0x4d84b760, ftLastWriteTime.dwHighDateTime=0x1d75c63, nFileSizeHigh=0x0, nFileSizeLow=0x16ad2, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Knz17DKF_L6UW.mp4", cAlternateFileName="")) returned 1 [0126.848] PathFindExtensionW (pszPath="knz17dkf_l6uw.mp4") returned=".mp4" [0126.848] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\Knz17DKF_L6UW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\knz17dkf_l6uw.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.849] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.849] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.849] CloseHandle (hObject=0x3dc) returned 1 [0126.849] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x16c32) returned 0x3bab170 [0126.851] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\Knz17DKF_L6UW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\knz17dkf_l6uw.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.851] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8e) returned 0x1183a10 [0126.853] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.853] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.862] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2832c40, ftCreationTime.dwHighDateTime=0x1d754b1, ftLastAccessTime.dwLowDateTime=0x2dd1c5a0, ftLastAccessTime.dwHighDateTime=0x1d75625, ftLastWriteTime.dwLowDateTime=0x2dd1c5a0, ftLastWriteTime.dwHighDateTime=0x1d75625, nFileSizeHigh=0x0, nFileSizeLow=0xe9ea, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="NsCf6g6DKIJANIzE2RT.flv", cAlternateFileName="")) returned 1 [0126.862] PathFindExtensionW (pszPath="nscf6g6dkijanize2rt.flv") returned=".flv" [0126.862] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\NsCf6g6DKIJANIzE2RT.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\nscf6g6dkijanize2rt.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.862] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.862] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.862] CloseHandle (hObject=0x3dc) returned 1 [0126.862] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xeb4a) returned 0x3bab170 [0126.864] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\NsCf6g6DKIJANIzE2RT.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\nscf6g6dkijanize2rt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.864] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183a10 [0126.866] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.866] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.875] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b647ea0, ftCreationTime.dwHighDateTime=0x1d75ca6, ftLastAccessTime.dwLowDateTime=0x17f7c060, ftLastAccessTime.dwHighDateTime=0x1d75ca9, ftLastWriteTime.dwLowDateTime=0x17f7c060, ftLastWriteTime.dwHighDateTime=0x1d75ca9, nFileSizeHigh=0x0, nFileSizeLow=0xc6ec, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="U0ec_M4przGLKk6Pxo1.flv", cAlternateFileName="")) returned 1 [0126.875] PathFindExtensionW (pszPath="u0ec_m4przglkk6pxo1.flv") returned=".flv" [0126.875] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\U0ec_M4przGLKk6Pxo1.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\u0ec_m4przglkk6pxo1.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.875] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.875] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.875] CloseHandle (hObject=0x3dc) returned 1 [0126.875] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc84c) returned 0x3bab170 [0126.877] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\U0ec_M4przGLKk6Pxo1.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\u0ec_m4przglkk6pxo1.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.877] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183a10 [0126.878] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.878] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.885] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23c4280, ftCreationTime.dwHighDateTime=0x1d75cf2, ftLastAccessTime.dwLowDateTime=0x96b6dd0, ftLastAccessTime.dwHighDateTime=0x1d75cf4, ftLastWriteTime.dwLowDateTime=0x96b6dd0, ftLastWriteTime.dwHighDateTime=0x1d75cf4, nFileSizeHigh=0x0, nFileSizeLow=0x3142, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="xTrZ.swf", cAlternateFileName="")) returned 1 [0126.885] PathFindExtensionW (pszPath="xtrz.swf") returned=".swf" [0126.885] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xTrZ.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xtrz.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.885] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.885] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.885] CloseHandle (hObject=0x3dc) returned 1 [0126.886] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x32a2) returned 0x3bc8950 [0126.887] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xTrZ.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xtrz.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.887] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7c) returned 0x1183a10 [0126.888] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.888] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.898] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23c4280, ftCreationTime.dwHighDateTime=0x1d75cf2, ftLastAccessTime.dwLowDateTime=0x96b6dd0, ftLastAccessTime.dwHighDateTime=0x1d75cf4, ftLastWriteTime.dwLowDateTime=0x96b6dd0, ftLastWriteTime.dwHighDateTime=0x1d75cf4, nFileSizeHigh=0x0, nFileSizeLow=0x3142, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="xtrz.swf", cAlternateFileName="")) returned 0 [0126.899] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.900] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.900] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2d0) returned 1 [0126.900] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0126.901] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89785f30, ftCreationTime.dwHighDateTime=0x1d753f1, ftLastAccessTime.dwLowDateTime=0x1b47cca0, ftLastAccessTime.dwHighDateTime=0x1d75741, ftLastWriteTime.dwLowDateTime=0x84a14357, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.902] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84a14357, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84a14357, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84a191c3, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.902] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6625840, ftCreationTime.dwHighDateTime=0x1d75260, ftLastAccessTime.dwLowDateTime=0x9f88cf00, ftLastAccessTime.dwHighDateTime=0x1d75c19, ftLastWriteTime.dwLowDateTime=0x9f88cf00, ftLastWriteTime.dwHighDateTime=0x1d75c19, nFileSizeHigh=0x0, nFileSizeLow=0x14643, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="2hLo0.odt", cAlternateFileName="")) returned 1 [0126.902] PathFindExtensionW (pszPath="2hlo0.odt") returned=".odt" [0126.903] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hLo0.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hlo0.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0126.903] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.903] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.903] CloseHandle (hObject=0x3dc) returned 1 [0126.903] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x147a3) returned 0x3bab170 [0126.905] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hLo0.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hlo0.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0126.905] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183a10 [0126.906] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.906] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0e3e30, ftCreationTime.dwHighDateTime=0x1d75c09, ftLastAccessTime.dwLowDateTime=0x11c388c0, ftLastAccessTime.dwHighDateTime=0x1d75ca7, ftLastWriteTime.dwLowDateTime=0x11c388c0, ftLastWriteTime.dwHighDateTime=0x1d75ca7, nFileSizeHigh=0x0, nFileSizeLow=0xbda5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yn_Kv.jpg", cAlternateFileName="")) returned 1 [0126.918] PathFindExtensionW (pszPath="yn_kv.jpg") returned=".jpg" [0126.918] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_Kv.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_kv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.918] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.919] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.919] CloseHandle (hObject=0x3d0) returned 1 [0126.919] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xbf05) returned 0x3b0ca08 [0126.921] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_Kv.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_kv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.921] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x7e) returned 0x1183ba0 [0126.923] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.923] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.937] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d0e3e30, ftCreationTime.dwHighDateTime=0x1d75c09, ftLastAccessTime.dwLowDateTime=0x11c388c0, ftLastAccessTime.dwHighDateTime=0x1d75ca7, ftLastWriteTime.dwLowDateTime=0x11c388c0, ftLastWriteTime.dwHighDateTime=0x1d75ca7, nFileSizeHigh=0x0, nFileSizeLow=0xbda5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="yn_kv.jpg", cAlternateFileName="")) returned 0 [0126.937] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0126.938] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0126.938] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e290) returned 1 [0126.938] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0126.938] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79dd0570, ftCreationTime.dwHighDateTime=0x1d75951, ftLastAccessTime.dwLowDateTime=0x55d55e70, ftLastAccessTime.dwHighDateTime=0x1d75bf9, ftLastWriteTime.dwLowDateTime=0x84aabb9a, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0126.990] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84aabb9a, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84aabb9a, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84ab07fd, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0126.990] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693c68b0, ftCreationTime.dwHighDateTime=0x1d75545, ftLastAccessTime.dwLowDateTime=0x879bb100, ftLastAccessTime.dwHighDateTime=0x1d75ce6, ftLastWriteTime.dwLowDateTime=0x879bb100, ftLastWriteTime.dwHighDateTime=0x1d75ce6, nFileSizeHigh=0x0, nFileSizeLow=0x18b88, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="oNZyM1CpX6Slc7.swf", cAlternateFileName="")) returned 1 [0126.991] PathFindExtensionW (pszPath="onzym1cpx6slc7.swf") returned=".swf" [0126.991] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\oNZyM1CpX6Slc7.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\onzym1cpx6slc7.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0126.991] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0126.991] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0126.991] CloseHandle (hObject=0x3d0) returned 1 [0126.992] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x18ce8) returned 0x3bab170 [0126.994] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\oNZyM1CpX6Slc7.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\onzym1cpx6slc7.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0126.994] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8a) returned 0x1183648 [0126.996] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0126.996] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.012] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e59aa0, ftCreationTime.dwHighDateTime=0x1d74f3b, ftLastAccessTime.dwLowDateTime=0x14039d50, ftLastAccessTime.dwHighDateTime=0x1d751e9, ftLastWriteTime.dwLowDateTime=0x14039d50, ftLastWriteTime.dwHighDateTime=0x1d751e9, nFileSizeHigh=0x0, nFileSizeLow=0xd9ea, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="QeFAs5IS6bvA.pptx", cAlternateFileName="")) returned 1 [0127.012] PathFindExtensionW (pszPath="qefas5is6bva.pptx") returned=".pptx" [0127.012] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\QeFAs5IS6bvA.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\qefas5is6bva.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.012] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.012] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.012] CloseHandle (hObject=0x3d0) returned 1 [0127.013] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xdb4a) returned 0x3bab170 [0127.015] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\QeFAs5IS6bvA.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\qefas5is6bva.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.015] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x88) returned 0x1183648 [0127.017] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.017] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.028] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60c3940, ftCreationTime.dwHighDateTime=0x1d759c4, ftLastAccessTime.dwLowDateTime=0xe9001db0, ftLastAccessTime.dwHighDateTime=0x1d75cf9, ftLastWriteTime.dwLowDateTime=0xe9001db0, ftLastWriteTime.dwHighDateTime=0x1d75cf9, nFileSizeHigh=0x0, nFileSizeLow=0xc62b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="znTgWd9fa.bmp", cAlternateFileName="")) returned 1 [0127.028] PathFindExtensionW (pszPath="zntgwd9fa.bmp") returned=".bmp" [0127.028] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\znTgWd9fa.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\zntgwd9fa.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.029] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.029] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.029] CloseHandle (hObject=0x3d0) returned 1 [0127.029] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc78b) returned 0x3bab170 [0127.030] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\znTgWd9fa.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\zntgwd9fa.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.031] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x80) returned 0x1183648 [0127.033] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.033] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.046] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60c3940, ftCreationTime.dwHighDateTime=0x1d759c4, ftLastAccessTime.dwLowDateTime=0xe9001db0, ftLastAccessTime.dwHighDateTime=0x1d75cf9, ftLastWriteTime.dwLowDateTime=0xe9001db0, ftLastWriteTime.dwHighDateTime=0x1d75cf9, nFileSizeHigh=0x0, nFileSizeLow=0xc62b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zntgwd9fa.bmp", cAlternateFileName="")) returned 0 [0127.046] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0127.047] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.048] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e270) returned 1 [0127.048] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.048] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7058270, ftCreationTime.dwHighDateTime=0x1d75c86, ftLastAccessTime.dwLowDateTime=0x81534390, ftLastAccessTime.dwHighDateTime=0x1d75d30, ftLastWriteTime.dwLowDateTime=0x84b407d9, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84b407d9, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84b407d9, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84b45604, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.055] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x371f4970, ftCreationTime.dwHighDateTime=0x1d75cf1, ftLastAccessTime.dwLowDateTime=0x542af860, ftLastAccessTime.dwHighDateTime=0x1d75d2e, ftLastWriteTime.dwLowDateTime=0x542af860, ftLastWriteTime.dwHighDateTime=0x1d75d2e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="8IhZrzb3ZQqi", cAlternateFileName="")) returned 1 [0127.055] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e200 [0127.055] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x96) returned 0x1183648 [0127.056] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x1183a10 [0127.056] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.057] CloseHandle (hObject=0x3d0) returned 1 [0127.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.074] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xbc) returned 0x1183a10 [0127.074] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.075] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.075] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.083] CloseHandle (hObject=0x3d0) returned 1 [0127.084] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a66ee70, ftCreationTime.dwHighDateTime=0x1d75621, ftLastAccessTime.dwLowDateTime=0xe07de430, ftLastAccessTime.dwHighDateTime=0x1d759d2, ftLastWriteTime.dwLowDateTime=0xe07de430, ftLastWriteTime.dwHighDateTime=0x1d759d2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="EMSFZnmUmwW2", cAlternateFileName="")) returned 1 [0127.084] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1e0 [0127.084] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x96) returned 0x1183a10 [0127.084] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x1183ab0 [0127.084] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.085] CloseHandle (hObject=0x3d0) returned 1 [0127.086] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0127.086] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xbc) returned 0x1183ab0 [0127.086] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.086] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0127.086] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.087] CloseHandle (hObject=0x3d0) returned 1 [0127.088] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695303a0, ftCreationTime.dwHighDateTime=0x1d753f5, ftLastAccessTime.dwLowDateTime=0x9d7ab800, ftLastAccessTime.dwHighDateTime=0x1d75812, ftLastWriteTime.dwLowDateTime=0x9d7ab800, ftLastWriteTime.dwHighDateTime=0x1d75812, nFileSizeHigh=0x0, nFileSizeLow=0xd722, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="j29TUnR2mS8et2.odt", cAlternateFileName="")) returned 1 [0127.088] PathFindExtensionW (pszPath="j29tunr2ms8et2.odt") returned=".odt" [0127.088] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29TUnR2mS8et2.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29tunr2ms8et2.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.088] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.088] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.089] CloseHandle (hObject=0x3d0) returned 1 [0127.089] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xd882) returned 0x3bab170 [0127.092] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29TUnR2mS8et2.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29tunr2ms8et2.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.092] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa0) returned 0x1183ab0 [0127.094] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.094] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.110] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cc5c0f0, ftCreationTime.dwHighDateTime=0x1d751c5, ftLastAccessTime.dwLowDateTime=0x8e456660, ftLastAccessTime.dwHighDateTime=0x1d752da, ftLastWriteTime.dwLowDateTime=0x8e456660, ftLastWriteTime.dwHighDateTime=0x1d752da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="tQnGaDriWz 598", cAlternateFileName="")) returned 1 [0127.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e240 [0127.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183ab0 [0127.110] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa0) returned 0x1183b58 [0127.110] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.111] CloseHandle (hObject=0x3d0) returned 1 [0127.111] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.111] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc0) returned 0x1183b58 [0127.111] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.114] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.114] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.116] CloseHandle (hObject=0x3d0) returned 1 [0127.116] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe2aa70, ftCreationTime.dwHighDateTime=0x1d74fed, ftLastAccessTime.dwLowDateTime=0x786f6520, ftLastAccessTime.dwHighDateTime=0x1d751d1, ftLastWriteTime.dwLowDateTime=0x786f6520, ftLastWriteTime.dwHighDateTime=0x1d751d1, nFileSizeHigh=0x0, nFileSizeLow=0xc523, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="uVOjn2_x74I.ods", cAlternateFileName="")) returned 1 [0127.116] PathFindExtensionW (pszPath="uvojn2_x74i.ods") returned=".ods" [0127.117] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uVOjn2_x74I.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uvojn2_x74i.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.117] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.117] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.117] CloseHandle (hObject=0x3d0) returned 1 [0127.117] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc683) returned 0x3bab170 [0127.119] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uVOjn2_x74I.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uvojn2_x74i.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.119] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183b58 [0127.126] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.126] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.137] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45b6f60, ftCreationTime.dwHighDateTime=0x1d75127, ftLastAccessTime.dwLowDateTime=0xf5353080, ftLastAccessTime.dwHighDateTime=0x1d754b0, ftLastWriteTime.dwLowDateTime=0xf5353080, ftLastWriteTime.dwHighDateTime=0x1d754b0, nFileSizeHigh=0x0, nFileSizeLow=0x4cdd, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Z64YPMlvlic7O9.doc", cAlternateFileName="")) returned 1 [0127.138] PathFindExtensionW (pszPath="z64ypmlvlic7o9.doc") returned=".doc" [0127.138] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\Z64YPMlvlic7O9.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\z64ypmlvlic7o9.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.138] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.138] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.138] CloseHandle (hObject=0x3d0) returned 1 [0127.138] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4e3d) returned 0x3bc8950 [0127.139] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\Z64YPMlvlic7O9.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\z64ypmlvlic7o9.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.139] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa0) returned 0x1183b58 [0127.142] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.142] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.154] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d22290, ftCreationTime.dwHighDateTime=0x1d757b6, ftLastAccessTime.dwLowDateTime=0xbb338b20, ftLastAccessTime.dwHighDateTime=0x1d75834, ftLastWriteTime.dwLowDateTime=0xbb338b20, ftLastWriteTime.dwHighDateTime=0x1d75834, nFileSizeHigh=0x0, nFileSizeLow=0xb54e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ZADUpwgiJ8uOonMiE8a.csv", cAlternateFileName="")) returned 1 [0127.154] PathFindExtensionW (pszPath="zadupwgij8uoonmie8a.csv") returned=".csv" [0127.154] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\ZADUpwgiJ8uOonMiE8a.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\zadupwgij8uoonmie8a.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.155] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.155] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.155] CloseHandle (hObject=0x3d0) returned 1 [0127.155] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb6ae) returned 0x3bab170 [0127.156] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\ZADUpwgiJ8uOonMiE8a.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\zadupwgij8uoonmie8a.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.157] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xaa) returned 0x1183b58 [0127.158] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.158] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.179] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53d1fc50, ftCreationTime.dwHighDateTime=0x1d74f1f, ftLastAccessTime.dwLowDateTime=0x2b8c42b0, ftLastAccessTime.dwHighDateTime=0x1d757f7, ftLastWriteTime.dwLowDateTime=0x2b8c42b0, ftLastWriteTime.dwHighDateTime=0x1d757f7, nFileSizeHigh=0x0, nFileSizeLow=0x17d54, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_yfFnDibGrsmCVUoSQ.pdf", cAlternateFileName="")) returned 1 [0127.179] PathFindExtensionW (pszPath="_yffndibgrsmcvuosq.pdf") returned=".pdf" [0127.179] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yfFnDibGrsmCVUoSQ.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yffndibgrsmcvuosq.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.179] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.179] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.179] CloseHandle (hObject=0x3d0) returned 1 [0127.180] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x17eb4) returned 0x3bab170 [0127.182] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yfFnDibGrsmCVUoSQ.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yffndibgrsmcvuosq.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.182] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa8) returned 0x1183b58 [0127.184] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.184] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.195] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53d1fc50, ftCreationTime.dwHighDateTime=0x1d74f1f, ftLastAccessTime.dwLowDateTime=0x2b8c42b0, ftLastAccessTime.dwHighDateTime=0x1d757f7, ftLastWriteTime.dwLowDateTime=0x2b8c42b0, ftLastWriteTime.dwHighDateTime=0x1d757f7, nFileSizeHigh=0x0, nFileSizeLow=0x17d54, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="_yffndibgrsmcvuosq.pdf", cAlternateFileName="")) returned 0 [0127.196] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.196] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cbf8) returned 1 [0127.196] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e250) returned 1 [0127.197] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.197] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x806370f0, ftCreationTime.dwHighDateTime=0x1d7502d, ftLastAccessTime.dwLowDateTime=0x78772150, ftLastAccessTime.dwHighDateTime=0x1d754c6, ftLastWriteTime.dwLowDateTime=0x84ead028, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.201] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38f94230, ftCreationTime.dwHighDateTime=0x1d75c44, ftLastAccessTime.dwLowDateTime=0xe3cc1500, ftLastAccessTime.dwHighDateTime=0x1d75d18, ftLastWriteTime.dwLowDateTime=0xe3cc1500, ftLastWriteTime.dwHighDateTime=0x1d75d18, nFileSizeHigh=0x0, nFileSizeLow=0x76a4, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="-IxCwY_jBOe.jpg", cAlternateFileName="")) returned 1 [0127.201] PathFindExtensionW (pszPath="-ixcwy_jboe.jpg") returned=".jpg" [0127.201] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-IxCwY_jBOe.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-ixcwy_jboe.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.201] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.201] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.201] CloseHandle (hObject=0x3d0) returned 1 [0127.202] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7804) returned 0x3bab170 [0127.203] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-IxCwY_jBOe.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-ixcwy_jboe.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.203] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x94) returned 0x1183b58 [0127.205] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.205] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.213] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ead028, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84ead028, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84eb6e31, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.213] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa74a9ef0, ftCreationTime.dwHighDateTime=0x1d74d8a, ftLastAccessTime.dwLowDateTime=0x89bb86e0, ftLastAccessTime.dwHighDateTime=0x1d7565b, ftLastWriteTime.dwLowDateTime=0x89bb86e0, ftLastWriteTime.dwHighDateTime=0x1d7565b, nFileSizeHigh=0x0, nFileSizeLow=0x156ec, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="79OkAP5ZR13BLE2cbVKN.png", cAlternateFileName="")) returned 1 [0127.213] PathFindExtensionW (pszPath="79okap5zr13ble2cbvkn.png") returned=".png" [0127.213] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79OkAP5ZR13BLE2cbVKN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79okap5zr13ble2cbvkn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.213] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.213] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.213] CloseHandle (hObject=0x3d0) returned 1 [0127.214] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1584c) returned 0x3bab170 [0127.215] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79OkAP5ZR13BLE2cbVKN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79okap5zr13ble2cbvkn.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.215] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa6) returned 0x1183b58 [0127.217] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.217] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.233] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb8def40, ftCreationTime.dwHighDateTime=0x1d75607, ftLastAccessTime.dwLowDateTime=0x89be2d40, ftLastAccessTime.dwHighDateTime=0x1d75940, ftLastWriteTime.dwLowDateTime=0x89be2d40, ftLastWriteTime.dwHighDateTime=0x1d75940, nFileSizeHigh=0x0, nFileSizeLow=0x17a9b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="eOTpS93JYGpfx7.bmp", cAlternateFileName="")) returned 1 [0127.233] PathFindExtensionW (pszPath="eotps93jygpfx7.bmp") returned=".bmp" [0127.233] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eOTpS93JYGpfx7.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eotps93jygpfx7.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.233] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.233] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.233] CloseHandle (hObject=0x3d0) returned 1 [0127.234] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x17bfb) returned 0x3bab170 [0127.236] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eOTpS93JYGpfx7.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eotps93jygpfx7.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.236] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183b58 [0127.238] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.238] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.252] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4c3ee0, ftCreationTime.dwHighDateTime=0x1d757f6, ftLastAccessTime.dwLowDateTime=0x29ff1df0, ftLastAccessTime.dwHighDateTime=0x1d75d24, ftLastWriteTime.dwLowDateTime=0x29ff1df0, ftLastWriteTime.dwHighDateTime=0x1d75d24, nFileSizeHigh=0x0, nFileSizeLow=0x10a2f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="J-r8reKWUlmUpF.png", cAlternateFileName="")) returned 1 [0127.252] PathFindExtensionW (pszPath="j-r8rekwulmupf.png") returned=".png" [0127.252] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\J-r8reKWUlmUpF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\j-r8rekwulmupf.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.252] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.253] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.253] CloseHandle (hObject=0x3d0) returned 1 [0127.253] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x10b8f) returned 0x3bab170 [0127.255] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\J-r8reKWUlmUpF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\j-r8rekwulmupf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.256] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x1183b58 [0127.258] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.258] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.268] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe4c3ee0, ftCreationTime.dwHighDateTime=0x1d757f6, ftLastAccessTime.dwLowDateTime=0x29ff1df0, ftLastAccessTime.dwHighDateTime=0x1d75d24, ftLastWriteTime.dwLowDateTime=0x29ff1df0, ftLastWriteTime.dwHighDateTime=0x1d75d24, nFileSizeHigh=0x0, nFileSizeLow=0x10a2f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="j-r8rekwulmupf.png", cAlternateFileName="")) returned 0 [0127.269] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.270] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0127.270] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2f0) returned 1 [0127.270] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0127.270] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c5f300, ftCreationTime.dwHighDateTime=0x1d74f90, ftLastAccessTime.dwLowDateTime=0xd82a3ca0, ftLastAccessTime.dwHighDateTime=0x1d7556a, ftLastWriteTime.dwLowDateTime=0x84ebbb42, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84ebbb42, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84ebbb42, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84ec081b, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.272] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987090, ftCreationTime.dwHighDateTime=0x1d75bb2, ftLastAccessTime.dwLowDateTime=0x9f090420, ftLastAccessTime.dwHighDateTime=0x1d75c7b, ftLastWriteTime.dwLowDateTime=0x9f090420, ftLastWriteTime.dwHighDateTime=0x1d75c7b, nFileSizeHigh=0x0, nFileSizeLow=0x2dc9, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="2yng1u7Tjz8aRj951.gif", cAlternateFileName="")) returned 1 [0127.273] PathFindExtensionW (pszPath="2yng1u7tjz8arj951.gif") returned=".gif" [0127.274] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7Tjz8aRj951.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7tjz8arj951.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.274] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.274] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.274] CloseHandle (hObject=0x3d0) returned 1 [0127.275] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2f29) returned 0x3bc8950 [0127.276] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7Tjz8aRj951.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7tjz8arj951.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.276] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb0) returned 0x11837d8 [0127.278] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.278] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.287] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdceed20, ftCreationTime.dwHighDateTime=0x1d74eb0, ftLastAccessTime.dwLowDateTime=0x6641ea50, ftLastAccessTime.dwHighDateTime=0x1d7562a, ftLastWriteTime.dwLowDateTime=0x6641ea50, ftLastWriteTime.dwHighDateTime=0x1d7562a, nFileSizeHigh=0x0, nFileSizeLow=0xc49d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="efvlcb.jpg", cAlternateFileName="")) returned 1 [0127.287] PathFindExtensionW (pszPath="efvlcb.jpg") returned=".jpg" [0127.288] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.288] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.288] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.288] CloseHandle (hObject=0x3d0) returned 1 [0127.288] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xc5fd) returned 0x3bab170 [0127.289] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.290] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9a) returned 0x11837d8 [0127.291] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.291] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.304] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afe2ed0, ftCreationTime.dwHighDateTime=0x1d75c70, ftLastAccessTime.dwLowDateTime=0xe0302dc0, ftLastAccessTime.dwHighDateTime=0x1d75d11, ftLastWriteTime.dwLowDateTime=0xe0302dc0, ftLastWriteTime.dwHighDateTime=0x1d75d11, nFileSizeHigh=0x0, nFileSizeLow=0x995c, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="W1r66c1.png", cAlternateFileName="")) returned 1 [0127.304] PathFindExtensionW (pszPath="w1r66c1.png") returned=".png" [0127.305] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\W1r66c1.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\w1r66c1.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.305] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.305] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.305] CloseHandle (hObject=0x3d0) returned 1 [0127.305] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9abc) returned 0x3bab170 [0127.307] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\W1r66c1.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\w1r66c1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.308] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x11837d8 [0127.310] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.310] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.317] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b7cca0, ftCreationTime.dwHighDateTime=0x1d7566b, ftLastAccessTime.dwLowDateTime=0x18a0d930, ftLastAccessTime.dwHighDateTime=0x1d757e9, ftLastWriteTime.dwLowDateTime=0x18a0d930, ftLastWriteTime.dwHighDateTime=0x1d757e9, nFileSizeHigh=0x0, nFileSizeLow=0x12de3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="YnSvajqMQ 0jEc.jpg", cAlternateFileName="")) returned 1 [0127.317] PathFindExtensionW (pszPath="ynsvajqmq 0jec.jpg") returned=".jpg" [0127.317] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\YnSvajqMQ 0jEc.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\ynsvajqmq 0jec.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.317] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.317] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.317] CloseHandle (hObject=0x3d0) returned 1 [0127.317] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x12f43) returned 0x3bab170 [0127.319] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\YnSvajqMQ 0jEc.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\ynsvajqmq 0jec.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.319] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xaa) returned 0x11837d8 [0127.321] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.321] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.331] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b7cca0, ftCreationTime.dwHighDateTime=0x1d7566b, ftLastAccessTime.dwLowDateTime=0x18a0d930, ftLastAccessTime.dwHighDateTime=0x1d757e9, ftLastWriteTime.dwLowDateTime=0x18a0d930, ftLastWriteTime.dwHighDateTime=0x1d757e9, nFileSizeHigh=0x0, nFileSizeLow=0x12de3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ynsvajqmq 0jec.jpg", cAlternateFileName="")) returned 0 [0127.331] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0127.340] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cef8) returned 1 [0127.340] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e150) returned 1 [0127.340] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.340] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ce6c9f0, ftCreationTime.dwHighDateTime=0x1d74f41, ftLastAccessTime.dwLowDateTime=0x19fa120, ftLastAccessTime.dwHighDateTime=0x1d75c40, ftLastWriteTime.dwLowDateTime=0x84f7ef6f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f7ef6f, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84f7ef6f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84f815ce, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.342] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc53120, ftCreationTime.dwHighDateTime=0x1d74d44, ftLastAccessTime.dwLowDateTime=0x3b027d40, ftLastAccessTime.dwHighDateTime=0x1d75581, ftLastWriteTime.dwLowDateTime=0x3b027d40, ftLastWriteTime.dwHighDateTime=0x1d75581, nFileSizeHigh=0x0, nFileSizeLow=0x12f5b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="82gqqKKxCSpyRDA-dh.png", cAlternateFileName="")) returned 1 [0127.342] PathFindExtensionW (pszPath="82gqqkkxcspyrda-dh.png") returned=".png" [0127.342] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqKKxCSpyRDA-dh.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqkkxcspyrda-dh.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.343] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.343] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.343] CloseHandle (hObject=0x3d0) returned 1 [0127.343] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x130bb) returned 0x3bab170 [0127.345] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqKKxCSpyRDA-dh.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqkkxcspyrda-dh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.346] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa4) returned 0x11837d8 [0127.347] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.348] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.358] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7b47270, ftCreationTime.dwHighDateTime=0x1d74fd5, ftLastAccessTime.dwLowDateTime=0x951bb0b0, ftLastAccessTime.dwHighDateTime=0x1d75137, ftLastWriteTime.dwLowDateTime=0x951bb0b0, ftLastWriteTime.dwHighDateTime=0x1d75137, nFileSizeHigh=0x0, nFileSizeLow=0x135c1, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Hvyz1pzHYb5z-nka9.png", cAlternateFileName="")) returned 1 [0127.358] PathFindExtensionW (pszPath="hvyz1pzhyb5z-nka9.png") returned=".png" [0127.358] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\Hvyz1pzHYb5z-nka9.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\hvyz1pzhyb5z-nka9.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.359] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.359] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.359] CloseHandle (hObject=0x3d0) returned 1 [0127.359] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x13721) returned 0x3bab170 [0127.361] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\Hvyz1pzHYb5z-nka9.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\hvyz1pzhyb5z-nka9.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.362] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa2) returned 0x11837d8 [0127.363] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.363] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.376] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f67c630, ftCreationTime.dwHighDateTime=0x1d75af2, ftLastAccessTime.dwLowDateTime=0xe741fc80, ftLastAccessTime.dwHighDateTime=0x1d75d05, ftLastWriteTime.dwLowDateTime=0xe741fc80, ftLastWriteTime.dwHighDateTime=0x1d75d05, nFileSizeHigh=0x0, nFileSizeLow=0x18227, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="IrhHoexA1Qos95YfSf.jpg", cAlternateFileName="")) returned 1 [0127.376] PathFindExtensionW (pszPath="irhhoexa1qos95yfsf.jpg") returned=".jpg" [0127.376] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\IrhHoexA1Qos95YfSf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\irhhoexa1qos95yfsf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.376] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.377] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.377] CloseHandle (hObject=0x3d0) returned 1 [0127.377] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x18387) returned 0x3bab170 [0127.379] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\IrhHoexA1Qos95YfSf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\irhhoexa1qos95yfsf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.380] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa4) returned 0x11837d8 [0127.382] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.382] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.397] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a52490, ftCreationTime.dwHighDateTime=0x1d74ce9, ftLastAccessTime.dwLowDateTime=0xde033b40, ftLastAccessTime.dwHighDateTime=0x1d75a56, ftLastWriteTime.dwLowDateTime=0xde033b40, ftLastWriteTime.dwHighDateTime=0x1d75a56, nFileSizeHigh=0x0, nFileSizeLow=0x2e1f, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="l2V0tpe8CZ6V.png", cAlternateFileName="")) returned 1 [0127.397] PathFindExtensionW (pszPath="l2v0tpe8cz6v.png") returned=".png" [0127.397] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2V0tpe8CZ6V.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2v0tpe8cz6v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.397] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.397] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.398] CloseHandle (hObject=0x3d0) returned 1 [0127.398] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2f7f) returned 0x3bc8950 [0127.399] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2V0tpe8CZ6V.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2v0tpe8cz6v.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.399] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x98) returned 0x11837d8 [0127.401] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.401] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1627c50, ftCreationTime.dwHighDateTime=0x1d74ecb, ftLastAccessTime.dwLowDateTime=0x9e0168b0, ftLastAccessTime.dwHighDateTime=0x1d759c9, ftLastWriteTime.dwLowDateTime=0x9e0168b0, ftLastWriteTime.dwHighDateTime=0x1d759c9, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="uNqNOm.png", cAlternateFileName="")) returned 1 [0127.411] PathFindExtensionW (pszPath="unqnom.png") returned=".png" [0127.411] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\uNqNOm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\unqnom.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.411] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.412] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.412] CloseHandle (hObject=0x3d0) returned 1 [0127.412] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1c98) returned 0x3bc8950 [0127.412] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\uNqNOm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\unqnom.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.413] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8c) returned 0x11837d8 [0127.414] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.414] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.422] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1627c50, ftCreationTime.dwHighDateTime=0x1d74ecb, ftLastAccessTime.dwLowDateTime=0x9e0168b0, ftLastAccessTime.dwHighDateTime=0x1d759c9, ftLastWriteTime.dwLowDateTime=0x9e0168b0, ftLastWriteTime.dwHighDateTime=0x1d759c9, nFileSizeHigh=0x0, nFileSizeLow=0x1b38, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="unqnom.png", cAlternateFileName="")) returned 0 [0127.422] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.423] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0127.423] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e160) returned 1 [0127.423] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0127.424] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa42a7dc0, ftCreationTime.dwHighDateTime=0x1d759c0, ftLastAccessTime.dwLowDateTime=0x8c7c16b0, ftLastAccessTime.dwHighDateTime=0x1d759ee, ftLastWriteTime.dwLowDateTime=0x84f8643d, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.425] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84f8643d, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x84f8643d, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x84f88b18, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.425] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12169ad0, ftCreationTime.dwHighDateTime=0x1d7516f, ftLastAccessTime.dwLowDateTime=0x82cdaa80, ftLastAccessTime.dwHighDateTime=0x1d751eb, ftLastWriteTime.dwLowDateTime=0x82cdaa80, ftLastWriteTime.dwHighDateTime=0x1d751eb, nFileSizeHigh=0x0, nFileSizeLow=0x2222, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="26DBUodB_7d2qIG1Et.jpg", cAlternateFileName="")) returned 1 [0127.425] PathFindExtensionW (pszPath="26dbuodb_7d2qig1et.jpg") returned=".jpg" [0127.425] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26DBUodB_7d2qIG1Et.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26dbuodb_7d2qig1et.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.426] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.426] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.426] CloseHandle (hObject=0x3d0) returned 1 [0127.426] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x2382) returned 0x3bc8950 [0127.426] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26DBUodB_7d2qIG1Et.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26dbuodb_7d2qig1et.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.427] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xac) returned 0x11837d8 [0127.428] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.428] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.438] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc7526d0, ftCreationTime.dwHighDateTime=0x1d74fb8, ftLastAccessTime.dwLowDateTime=0x901991f0, ftLastAccessTime.dwHighDateTime=0x1d7525d, ftLastWriteTime.dwLowDateTime=0x901991f0, ftLastWriteTime.dwHighDateTime=0x1d7525d, nFileSizeHigh=0x0, nFileSizeLow=0x11583, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="ltr1R.png", cAlternateFileName="")) returned 1 [0127.439] PathFindExtensionW (pszPath="ltr1r.png") returned=".png" [0127.439] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1R.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1r.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.439] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.439] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.439] CloseHandle (hObject=0x3d0) returned 1 [0127.440] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x116e3) returned 0x3bab170 [0127.441] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1R.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1r.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.441] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x92) returned 0x11837d8 [0127.445] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.445] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.457] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f155810, ftCreationTime.dwHighDateTime=0x1d74e7d, ftLastAccessTime.dwLowDateTime=0x3a1df990, ftLastAccessTime.dwHighDateTime=0x1d75324, ftLastWriteTime.dwLowDateTime=0x3a1df990, ftLastWriteTime.dwHighDateTime=0x1d75324, nFileSizeHigh=0x0, nFileSizeLow=0x4a6b, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="q_meO9__dIW4.png", cAlternateFileName="")) returned 1 [0127.457] PathFindExtensionW (pszPath="q_meo9__diw4.png") returned=".png" [0127.457] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meO9__dIW4.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meo9__diw4.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.457] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.457] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.458] CloseHandle (hObject=0x3d0) returned 1 [0127.458] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x4bcb) returned 0x3bc8950 [0127.460] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meO9__dIW4.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meo9__diw4.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.460] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa0) returned 0x11837d8 [0127.461] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.461] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.470] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b06ac90, ftCreationTime.dwHighDateTime=0x1d74dc5, ftLastAccessTime.dwLowDateTime=0xe2f2ebc0, ftLastAccessTime.dwHighDateTime=0x1d75504, ftLastWriteTime.dwLowDateTime=0xe2f2ebc0, ftLastWriteTime.dwHighDateTime=0x1d75504, nFileSizeHigh=0x0, nFileSizeLow=0xc8e7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="VFbzrE9GSlvnX-dMGQl.png", cAlternateFileName="")) returned 1 [0127.470] PathFindExtensionW (pszPath="vfbzre9gslvnx-dmgql.png") returned=".png" [0127.470] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\VFbzrE9GSlvnX-dMGQl.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\vfbzre9gslvnx-dmgql.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.470] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.470] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.470] CloseHandle (hObject=0x3d0) returned 1 [0127.471] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xca47) returned 0x3bab170 [0127.472] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\VFbzrE9GSlvnX-dMGQl.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\vfbzre9gslvnx-dmgql.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.473] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xae) returned 0x11837d8 [0127.475] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.475] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.484] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b06ac90, ftCreationTime.dwHighDateTime=0x1d74dc5, ftLastAccessTime.dwLowDateTime=0xe2f2ebc0, ftLastAccessTime.dwHighDateTime=0x1d75504, ftLastWriteTime.dwLowDateTime=0xe2f2ebc0, ftLastWriteTime.dwHighDateTime=0x1d75504, nFileSizeHigh=0x0, nFileSizeLow=0xc8e7, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="vfbzre9gslvnx-dmgql.png", cAlternateFileName="")) returned 0 [0127.484] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0127.485] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.485] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0127.485] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0127.485] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x371f4970, ftCreationTime.dwHighDateTime=0x1d75cf1, ftLastAccessTime.dwLowDateTime=0x542af860, ftLastAccessTime.dwHighDateTime=0x1d75d2e, ftLastWriteTime.dwLowDateTime=0x853941cf, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.486] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853941cf, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x853941cf, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x853ac762, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.486] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f7ba0, ftCreationTime.dwHighDateTime=0x1d75433, ftLastAccessTime.dwLowDateTime=0x4e237ce0, ftLastAccessTime.dwHighDateTime=0x1d757d8, ftLastWriteTime.dwLowDateTime=0x4e237ce0, ftLastWriteTime.dwHighDateTime=0x1d757d8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rFoVM3vIT.odp", cAlternateFileName="")) returned 1 [0127.487] PathFindExtensionW (pszPath="rfovm3vit.odp") returned=".odp" [0127.487] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rFoVM3vIT.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rfovm3vit.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.487] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.487] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.487] CloseHandle (hObject=0x3d0) returned 1 [0127.487] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x16e9e) returned 0x3bab170 [0127.489] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rFoVM3vIT.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rfovm3vit.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.489] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb0) returned 0x1183648 [0127.491] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.491] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.504] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7f7ba0, ftCreationTime.dwHighDateTime=0x1d75433, ftLastAccessTime.dwLowDateTime=0x4e237ce0, ftLastAccessTime.dwHighDateTime=0x1d757d8, ftLastWriteTime.dwLowDateTime=0x4e237ce0, ftLastWriteTime.dwHighDateTime=0x1d757d8, nFileSizeHigh=0x0, nFileSizeLow=0x16d3e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="rfovm3vit.odp", cAlternateFileName="")) returned 0 [0127.504] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0127.505] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.505] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1e0) returned 1 [0127.505] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.506] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a66ee70, ftCreationTime.dwHighDateTime=0x1d75621, ftLastAccessTime.dwLowDateTime=0xe07de430, ftLastAccessTime.dwHighDateTime=0x1d759d2, ftLastWriteTime.dwLowDateTime=0x853aecda, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.507] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853aecda, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x853aecda, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x853aecda, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.507] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ce3ea0, ftCreationTime.dwHighDateTime=0x1d74fb6, ftLastAccessTime.dwLowDateTime=0xb65a5e30, ftLastAccessTime.dwHighDateTime=0x1d75325, ftLastWriteTime.dwLowDateTime=0xb65a5e30, ftLastWriteTime.dwHighDateTime=0x1d75325, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Fq_nXQ", cAlternateFileName="")) returned 1 [0127.507] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e1e0 [0127.507] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa4) returned 0x1183648 [0127.507] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xaa) returned 0x1183988 [0127.507] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.508] CloseHandle (hObject=0x3d0) returned 1 [0127.508] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0127.508] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xca) returned 0x1183988 [0127.509] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.511] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0127.511] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.512] CloseHandle (hObject=0x3d0) returned 1 [0127.512] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x576aa90, ftCreationTime.dwHighDateTime=0x1d758ef, ftLastAccessTime.dwLowDateTime=0xc4b7e160, ftLastAccessTime.dwHighDateTime=0x1d759a5, ftLastWriteTime.dwLowDateTime=0xc4b7e160, ftLastWriteTime.dwHighDateTime=0x1d759a5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="tHzcJBusqM", cAlternateFileName="")) returned 1 [0127.512] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e270 [0127.512] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xac) returned 0x1183988 [0127.512] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb2) returned 0x11837d8 [0127.513] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.513] CloseHandle (hObject=0x3d0) returned 1 [0127.513] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.513] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd2) returned 0x11837d8 [0127.514] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.514] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.514] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.515] CloseHandle (hObject=0x3d0) returned 1 [0127.516] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f6fb050, ftCreationTime.dwHighDateTime=0x1d75055, ftLastAccessTime.dwLowDateTime=0x17e0a950, ftLastAccessTime.dwHighDateTime=0x1d75b11, ftLastWriteTime.dwLowDateTime=0x17e0a950, ftLastWriteTime.dwHighDateTime=0x1d75b11, nFileSizeHigh=0x0, nFileSizeLow=0x8ead, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="vByoCFGEN_dQ34ABZzD.pdf", cAlternateFileName="")) returned 1 [0127.516] PathFindExtensionW (pszPath="vbyocfgen_dq34abzzd.pdf") returned=".pdf" [0127.516] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vByoCFGEN_dQ34ABZzD.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vbyocfgen_dq34abzzd.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.516] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.516] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.517] CloseHandle (hObject=0x3d0) returned 1 [0127.517] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x900d) returned 0x3bab170 [0127.518] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vByoCFGEN_dQ34ABZzD.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vbyocfgen_dq34abzzd.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.518] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc4) returned 0x11837d8 [0127.520] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.520] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.548] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975e190, ftCreationTime.dwHighDateTime=0x1d74eb0, ftLastAccessTime.dwLowDateTime=0x99c403f0, ftLastAccessTime.dwHighDateTime=0x1d75796, ftLastWriteTime.dwLowDateTime=0x99c403f0, ftLastWriteTime.dwHighDateTime=0x1d75796, nFileSizeHigh=0x0, nFileSizeLow=0x113c3, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="vtrRTEHJNU2f.xlsx", cAlternateFileName="")) returned 1 [0127.548] PathFindExtensionW (pszPath="vtrrtehjnu2f.xlsx") returned=".xlsx" [0127.548] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrRTEHJNU2f.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrrtehjnu2f.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.548] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.549] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.549] CloseHandle (hObject=0x3d0) returned 1 [0127.549] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x11523) returned 0x3bab170 [0127.549] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrRTEHJNU2f.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrrtehjnu2f.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.550] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb8) returned 0x11837d8 [0127.551] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.551] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.563] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b75d250, ftCreationTime.dwHighDateTime=0x1d75ca3, ftLastAccessTime.dwLowDateTime=0x8a39fd90, ftLastAccessTime.dwHighDateTime=0x1d75d1d, ftLastWriteTime.dwLowDateTime=0x8a39fd90, ftLastWriteTime.dwHighDateTime=0x1d75d1d, nFileSizeHigh=0x0, nFileSizeLow=0xb8ff, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zFuPCcInHOUh c6.odp", cAlternateFileName="")) returned 1 [0127.563] PathFindExtensionW (pszPath="zfupccinhouh c6.odp") returned=".odp" [0127.563] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zFuPCcInHOUh c6.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zfupccinhouh c6.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.563] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.563] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.563] CloseHandle (hObject=0x3d0) returned 1 [0127.564] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xba5f) returned 0x3bab170 [0127.565] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zFuPCcInHOUh c6.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zfupccinhouh c6.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.566] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xbc) returned 0x11837d8 [0127.568] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.568] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.579] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b75d250, ftCreationTime.dwHighDateTime=0x1d75ca3, ftLastAccessTime.dwLowDateTime=0x8a39fd90, ftLastAccessTime.dwHighDateTime=0x1d75d1d, ftLastWriteTime.dwLowDateTime=0x8a39fd90, ftLastWriteTime.dwHighDateTime=0x1d75d1d, nFileSizeHigh=0x0, nFileSizeLow=0xb8ff, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="zfupccinhouh c6.odp", cAlternateFileName="")) returned 0 [0127.579] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.580] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0127.581] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e240) returned 1 [0127.581] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.581] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cc5c0f0, ftCreationTime.dwHighDateTime=0x1d751c5, ftLastAccessTime.dwLowDateTime=0x8e456660, ftLastAccessTime.dwHighDateTime=0x1d752da, ftLastWriteTime.dwLowDateTime=0x853f57a5, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.582] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853ee666, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x853ee666, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x853fa657, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.583] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75ac860, ftCreationTime.dwHighDateTime=0x1d75c7a, ftLastAccessTime.dwLowDateTime=0x7f927d90, ftLastAccessTime.dwHighDateTime=0x1d75d2c, ftLastWriteTime.dwLowDateTime=0x7f927d90, ftLastWriteTime.dwHighDateTime=0x1d75d2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="I U2cG6ido", cAlternateFileName="")) returned 1 [0127.583] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e200 [0127.583] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb0) returned 0x11837d8 [0127.583] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb6) returned 0x1183a40 [0127.583] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.584] CloseHandle (hObject=0x3d0) returned 1 [0127.584] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a40) returned 1 [0127.584] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd6) returned 0x1183a40 [0127.584] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.585] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a40) returned 1 [0127.585] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.586] CloseHandle (hObject=0x3d0) returned 1 [0127.587] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb730950, ftCreationTime.dwHighDateTime=0x1d74f05, ftLastAccessTime.dwLowDateTime=0xb1b218e0, ftLastAccessTime.dwHighDateTime=0x1d74f61, ftLastWriteTime.dwLowDateTime=0xb1b218e0, ftLastWriteTime.dwHighDateTime=0x1d74f61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="X1Ww2u", cAlternateFileName="")) returned 1 [0127.587] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x8) returned 0x117e2e0 [0127.587] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xa8) returned 0x1183a40 [0127.587] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xae) returned 0x1183af0 [0127.587] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x4000100, hTemplateFile=0x0) returned 0x3d0 [0127.588] CloseHandle (hObject=0x3d0) returned 1 [0127.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.588] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xce) returned 0x1183af0 [0127.588] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\1yg4ztc5-readme.txt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\1yg4ztc5-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.589] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.589] WriteFile (in: hFile=0x3d0, lpBuffer=0x117fe30*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x43fac8, lpOverlapped=0x0 | out: lpBuffer=0x117fe30*, lpNumberOfBytesWritten=0x43fac8*=0x1b10, lpOverlapped=0x0) returned 1 [0127.590] CloseHandle (hObject=0x3d0) returned 1 [0127.590] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb730950, ftCreationTime.dwHighDateTime=0x1d74f05, ftLastAccessTime.dwLowDateTime=0xb1b218e0, ftLastAccessTime.dwHighDateTime=0x1d74f61, ftLastWriteTime.dwLowDateTime=0xb1b218e0, ftLastWriteTime.dwHighDateTime=0x1d74f61, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="x1ww2u", cAlternateFileName="")) returned 0 [0127.590] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.592] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.592] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e1e0) returned 1 [0127.592] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.592] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ce3ea0, ftCreationTime.dwHighDateTime=0x1d74fb6, ftLastAccessTime.dwLowDateTime=0xb65a5e30, ftLastAccessTime.dwHighDateTime=0x1d75325, ftLastWriteTime.dwLowDateTime=0x857bebbe, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.593] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857b9ea3, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x857b9ea3, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x857c1316, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.593] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccd7f70, ftCreationTime.dwHighDateTime=0x1d7558b, ftLastAccessTime.dwLowDateTime=0xb32755d0, ftLastAccessTime.dwHighDateTime=0x1d75abc, ftLastWriteTime.dwLowDateTime=0xb32755d0, ftLastWriteTime.dwHighDateTime=0x1d75abc, nFileSizeHigh=0x0, nFileSizeLow=0x9b0e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="msUNAWZXS3N.docx", cAlternateFileName="")) returned 1 [0127.593] PathFindExtensionW (pszPath="msunawzxs3n.docx") returned=".docx" [0127.593] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msUNAWZXS3N.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msunawzxs3n.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.594] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.594] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.594] CloseHandle (hObject=0x3d0) returned 1 [0127.594] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x9c6e) returned 0x3bab170 [0127.595] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msUNAWZXS3N.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msunawzxs3n.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.595] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc4) returned 0x1183648 [0127.596] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.597] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.606] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b2a2c0, ftCreationTime.dwHighDateTime=0x1d75a9f, ftLastAccessTime.dwLowDateTime=0xe341ea30, ftLastAccessTime.dwHighDateTime=0x1d75c17, ftLastWriteTime.dwLowDateTime=0xe341ea30, ftLastWriteTime.dwHighDateTime=0x1d75c17, nFileSizeHigh=0x0, nFileSizeLow=0x1806, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="pE1KWICFBjFCdIaD5N31.ppt", cAlternateFileName="")) returned 1 [0127.606] PathFindExtensionW (pszPath="pe1kwicfbjfcdiad5n31.ppt") returned=".ppt" [0127.606] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pE1KWICFBjFCdIaD5N31.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pe1kwicfbjfcdiad5n31.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.606] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.607] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.607] CloseHandle (hObject=0x3d0) returned 1 [0127.607] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x1966) returned 0x3bc8950 [0127.608] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pE1KWICFBjFCdIaD5N31.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pe1kwicfbjfcdiad5n31.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.608] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd4) returned 0x1183648 [0127.610] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.610] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.619] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99b2a2c0, ftCreationTime.dwHighDateTime=0x1d75a9f, ftLastAccessTime.dwLowDateTime=0xe341ea30, ftLastAccessTime.dwHighDateTime=0x1d75c17, ftLastWriteTime.dwLowDateTime=0xe341ea30, ftLastWriteTime.dwHighDateTime=0x1d75c17, nFileSizeHigh=0x0, nFileSizeLow=0x1806, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="pe1kwicfbjfcdiad5n31.ppt", cAlternateFileName="")) returned 0 [0127.619] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0127.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e270) returned 1 [0127.621] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.621] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x576aa90, ftCreationTime.dwHighDateTime=0x1d758ef, ftLastAccessTime.dwLowDateTime=0xc4b7e160, ftLastAccessTime.dwHighDateTime=0x1d759a5, ftLastWriteTime.dwLowDateTime=0x857c618f, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.622] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857c618f, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x857c618f, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x857cb490, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.623] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d5ba0d0, ftCreationTime.dwHighDateTime=0x1d750cb, ftLastAccessTime.dwLowDateTime=0xb0b63b30, ftLastAccessTime.dwHighDateTime=0x1d754dc, ftLastWriteTime.dwLowDateTime=0xb0b63b30, ftLastWriteTime.dwHighDateTime=0x1d754dc, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="DepCFB0-o8xXJUSV-moM.ots", cAlternateFileName="")) returned 1 [0127.623] PathFindExtensionW (pszPath="depcfb0-o8xxjusv-mom.ots") returned=".ots" [0127.623] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\DepCFB0-o8xXJUSV-moM.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\depcfb0-o8xxjusv-mom.ots"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.623] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.623] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.623] CloseHandle (hObject=0x3d0) returned 1 [0127.624] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x13005) returned 0x3bab170 [0127.624] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\DepCFB0-o8xXJUSV-moM.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\depcfb0-o8xxjusv-mom.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.625] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xdc) returned 0x1183648 [0127.626] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.626] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.648] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eb3d8a0, ftCreationTime.dwHighDateTime=0x1d74d82, ftLastAccessTime.dwLowDateTime=0x531fb7c0, ftLastAccessTime.dwHighDateTime=0x1d7519a, ftLastWriteTime.dwLowDateTime=0x531fb7c0, ftLastWriteTime.dwHighDateTime=0x1d7519a, nFileSizeHigh=0x0, nFileSizeLow=0x7d7e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="sCcE3UCNSNz.pdf", cAlternateFileName="")) returned 1 [0127.648] PathFindExtensionW (pszPath="scce3ucnsnz.pdf") returned=".pdf" [0127.648] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\sCcE3UCNSNz.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\scce3ucnsnz.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.649] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.649] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.649] CloseHandle (hObject=0x3d0) returned 1 [0127.649] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x7ede) returned 0x3bab170 [0127.650] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\sCcE3UCNSNz.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\scce3ucnsnz.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.650] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xca) returned 0x1183648 [0127.659] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.659] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.665] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7409a390, ftCreationTime.dwHighDateTime=0x1d74f6c, ftLastAccessTime.dwLowDateTime=0xe647f060, ftLastAccessTime.dwHighDateTime=0x1d753d6, ftLastWriteTime.dwLowDateTime=0xe647f060, ftLastWriteTime.dwHighDateTime=0x1d753d6, nFileSizeHigh=0x0, nFileSizeLow=0x64d6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="Vb2ektodNObV_mcps.xls", cAlternateFileName="")) returned 1 [0127.666] PathFindExtensionW (pszPath="vb2ektodnobv_mcps.xls") returned=".xls" [0127.666] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\Vb2ektodNObV_mcps.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\vb2ektodnobv_mcps.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.666] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.666] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.666] CloseHandle (hObject=0x3d0) returned 1 [0127.666] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x6636) returned 0x3bc8950 [0127.667] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\Vb2ektodNObV_mcps.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\vb2ektodnobv_mcps.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.668] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd6) returned 0x1183648 [0127.669] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.669] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.682] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7409a390, ftCreationTime.dwHighDateTime=0x1d74f6c, ftLastAccessTime.dwLowDateTime=0xe647f060, ftLastAccessTime.dwHighDateTime=0x1d753d6, ftLastWriteTime.dwLowDateTime=0xe647f060, ftLastWriteTime.dwHighDateTime=0x1d753d6, nFileSizeHigh=0x0, nFileSizeLow=0x64d6, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="vb2ektodnobv_mcps.xls", cAlternateFileName="")) returned 0 [0127.682] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.683] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.683] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e200) returned 1 [0127.683] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cd7e0 [0127.683] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc75ac860, ftCreationTime.dwHighDateTime=0x1d75c7a, ftLastAccessTime.dwLowDateTime=0x7f927d90, ftLastAccessTime.dwHighDateTime=0x1d75d2c, ftLastWriteTime.dwLowDateTime=0x858736b7, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.685] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858736b7, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x858736b7, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x85878753, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.685] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc463bd40, ftCreationTime.dwHighDateTime=0x1d74f39, ftLastAccessTime.dwLowDateTime=0xb2ce23f0, ftLastAccessTime.dwHighDateTime=0x1d75b59, ftLastWriteTime.dwLowDateTime=0xb2ce23f0, ftLastWriteTime.dwHighDateTime=0x1d75b59, nFileSizeHigh=0x0, nFileSizeLow=0x5552, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="2sgV3kSeR.xlsx", cAlternateFileName="")) returned 1 [0127.685] PathFindExtensionW (pszPath="2sgv3kser.xlsx") returned=".xlsx" [0127.685] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgV3kSeR.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgv3kser.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.685] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.685] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.686] CloseHandle (hObject=0x3d0) returned 1 [0127.686] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x56b2) returned 0x3bc8950 [0127.686] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgV3kSeR.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgv3kser.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.686] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xcc) returned 0x1183648 [0127.688] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.688] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.700] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1938880, ftCreationTime.dwHighDateTime=0x1d75589, ftLastAccessTime.dwLowDateTime=0x5fe52d30, ftLastAccessTime.dwHighDateTime=0x1d75656, ftLastWriteTime.dwLowDateTime=0x5fe52d30, ftLastWriteTime.dwHighDateTime=0x1d75656, nFileSizeHigh=0x0, nFileSizeLow=0xe04e, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="fPPdZaPlbnKdRA9cT2f.pptx", cAlternateFileName="")) returned 1 [0127.700] PathFindExtensionW (pszPath="fppdzaplbnkdra9ct2f.pptx") returned=".pptx" [0127.700] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fPPdZaPlbnKdRA9cT2f.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fppdzaplbnkdra9ct2f.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.700] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.700] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.701] CloseHandle (hObject=0x3d0) returned 1 [0127.701] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xe1ae) returned 0x3bab170 [0127.702] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fPPdZaPlbnKdRA9cT2f.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fppdzaplbnkdra9ct2f.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.702] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe0) returned 0x1183648 [0127.704] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.704] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.716] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60801b0, ftCreationTime.dwHighDateTime=0x1d74d68, ftLastAccessTime.dwLowDateTime=0xb9e8c0a0, ftLastAccessTime.dwHighDateTime=0x1d750aa, ftLastWriteTime.dwLowDateTime=0xb9e8c0a0, ftLastWriteTime.dwHighDateTime=0x1d750aa, nFileSizeHigh=0x0, nFileSizeLow=0xb4e5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="SUhmG_Z8a69h.odt", cAlternateFileName="")) returned 1 [0127.716] PathFindExtensionW (pszPath="suhmg_z8a69h.odt") returned=".odt" [0127.716] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\SUhmG_Z8a69h.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\suhmg_z8a69h.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.716] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.716] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.717] CloseHandle (hObject=0x3d0) returned 1 [0127.717] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xb645) returned 0x3bab170 [0127.719] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\SUhmG_Z8a69h.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\suhmg_z8a69h.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.719] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd0) returned 0x1183648 [0127.721] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.721] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.733] FindNextFileW (in: hFindFile=0x4cd7e0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60801b0, ftCreationTime.dwHighDateTime=0x1d74d68, ftLastAccessTime.dwLowDateTime=0xb9e8c0a0, ftLastAccessTime.dwHighDateTime=0x1d750aa, ftLastWriteTime.dwLowDateTime=0xb9e8c0a0, ftLastWriteTime.dwHighDateTime=0x1d750aa, nFileSizeHigh=0x0, nFileSizeLow=0xb4e5, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="suhmg_z8a69h.odt", cAlternateFileName="")) returned 0 [0127.734] FindClose (in: hFindFile=0x4cd7e0 | out: hFindFile=0x4cd7e0) returned 1 [0127.734] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a40) returned 1 [0127.734] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e2e0) returned 1 [0127.735] FindFirstFileExW (in: lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\*", fInfoLevelId=0x1, lpFindFileData=0x43fb00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x43fb00) returned 0x4cdca0 [0127.735] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb730950, ftCreationTime.dwHighDateTime=0x1d74f05, ftLastAccessTime.dwLowDateTime=0xb1b218e0, ftLastAccessTime.dwHighDateTime=0x1d74f61, ftLastWriteTime.dwLowDateTime=0x8587d2c1, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="..", cAlternateFileName="")) returned 1 [0127.737] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8587d2c1, ftCreationTime.dwHighDateTime=0x1d76f76, ftLastAccessTime.dwLowDateTime=0x8587d2c1, ftLastAccessTime.dwHighDateTime=0x1d76f76, ftLastWriteTime.dwLowDateTime=0x8587f9a7, ftLastWriteTime.dwHighDateTime=0x1d76f76, nFileSizeHigh=0x0, nFileSizeLow=0x1b10, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="1yg4ztc5-readme.txt", cAlternateFileName="")) returned 1 [0127.737] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab0c80, ftCreationTime.dwHighDateTime=0x1d754b1, ftLastAccessTime.dwLowDateTime=0x4d23300, ftLastAccessTime.dwHighDateTime=0x1d75888, ftLastWriteTime.dwLowDateTime=0x4d23300, ftLastWriteTime.dwHighDateTime=0x1d75888, nFileSizeHigh=0x0, nFileSizeLow=0x12e6d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="nE5O.odt", cAlternateFileName="")) returned 1 [0127.737] PathFindExtensionW (pszPath="ne5o.odt") returned=".odt" [0127.737] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\nE5O.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\ne5o.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0 [0127.737] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.738] ReadFile (in: hFile=0x3d0, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.738] CloseHandle (hObject=0x3d0) returned 1 [0127.738] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0x12fcd) returned 0x3bab170 [0127.740] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\nE5O.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\ne5o.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3d0 [0127.740] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xb8) returned 0x1183648 [0127.742] CreateIoCompletionPort (FileHandle=0x3d0, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.742] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.753] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a797e40, ftCreationTime.dwHighDateTime=0x1d75496, ftLastAccessTime.dwLowDateTime=0xdcc06e90, ftLastAccessTime.dwHighDateTime=0x1d75c65, ftLastWriteTime.dwLowDateTime=0xdcc06e90, ftLastWriteTime.dwHighDateTime=0x1d75c65, nFileSizeHigh=0x0, nFileSizeLow=0xec3d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="QVWuOcr0ZSOk.csv", cAlternateFileName="")) returned 1 [0127.753] PathFindExtensionW (pszPath="qvwuocr0zsok.csv") returned=".csv" [0127.754] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\QVWuOcr0ZSOk.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\qvwuocr0zsok.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc [0127.754] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0xffffff18, lpNewFilePointer=0xffffffff, dwMoveMethod=0x0 | out: lpNewFilePointer=0xffffffff) returned 1 [0127.754] ReadFile (in: hFile=0x3dc, lpBuffer=0x43f9cc, nNumberOfBytesToRead=0xe8, lpNumberOfBytesRead=0x43fab4, lpOverlapped=0x0 | out: lpBuffer=0x43f9cc*, lpNumberOfBytesRead=0x43fab4*=0xe8, lpOverlapped=0x0) returned 1 [0127.754] CloseHandle (hObject=0x3dc) returned 1 [0127.758] RtlAllocateHeap (HeapHandle=0x37d0000, Flags=0x8, Size=0xed9d) returned 0x3bab170 [0127.759] CreateFileW (lpFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\QVWuOcr0ZSOk.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\qvwuocr0zsok.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x48000000, hTemplateFile=0x0) returned 0x3dc [0127.759] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc8) returned 0x1183648 [0127.761] CreateIoCompletionPort (FileHandle=0x3dc, ExistingCompletionPort=0x3a8, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x3a8 [0127.761] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.775] FindNextFileW (in: hFindFile=0x4cdca0, lpFindFileData=0x43fb00 | out: lpFindFileData=0x43fb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a797e40, ftCreationTime.dwHighDateTime=0x1d75496, ftLastAccessTime.dwLowDateTime=0xdcc06e90, ftLastAccessTime.dwHighDateTime=0x1d75c65, ftLastWriteTime.dwLowDateTime=0xdcc06e90, ftLastWriteTime.dwHighDateTime=0x1d75c65, nFileSizeHigh=0x0, nFileSizeLow=0xec3d, dwReserved0=0xa0000003, dwReserved1=0x43fae4, cFileName="qvwuocr0zsok.csv", cAlternateFileName="")) returned 0 [0127.776] FindClose (in: hFindFile=0x4cdca0 | out: hFindFile=0x4cdca0) returned 1 [0127.777] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0127.777] GetDriveTypeW (lpRootPathName="\\\\?\\D:\\") returned 0x1 [0127.777] GetDriveTypeW (lpRootPathName="\\\\?\\E:\\") returned 0x1 [0127.777] GetDriveTypeW (lpRootPathName="\\\\?\\F:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\G:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\H:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\I:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\J:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\K:\\") returned 0x1 [0127.778] GetDriveTypeW (lpRootPathName="\\\\?\\L:\\") returned 0x1 [0127.779] GetDriveTypeW (lpRootPathName="\\\\?\\M:\\") returned 0x1 [0127.779] GetDriveTypeW (lpRootPathName="\\\\?\\N:\\") returned 0x1 [0127.779] GetDriveTypeW (lpRootPathName="\\\\?\\O:\\") returned 0x1 [0127.779] GetDriveTypeW (lpRootPathName="\\\\?\\P:\\") returned 0x1 [0127.779] GetDriveTypeW (lpRootPathName="\\\\?\\Q:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\R:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\S:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\T:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\U:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\V:\\") returned 0x1 [0127.780] GetDriveTypeW (lpRootPathName="\\\\?\\W:\\") returned 0x1 [0127.781] GetDriveTypeW (lpRootPathName="\\\\?\\X:\\") returned 0x1 [0127.781] GetDriveTypeW (lpRootPathName="\\\\?\\Y:\\") returned 0x1 [0127.781] GetDriveTypeW (lpRootPathName="\\\\?\\Z:\\") returned 0x1 [0127.781] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3b4 [0127.807] Process32FirstW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0127.808] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x85, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0127.808] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0127.809] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.810] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0127.810] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0127.811] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0127.812] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0127.813] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0127.813] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.814] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x288, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.815] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1f0, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0127.816] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.817] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.818] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.818] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.819] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.820] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.821] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.821] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0127.822] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.823] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x3e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0127.824] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0127.825] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0127.825] Process32NextW (in: hSnapshot=0x3b4, lppe=0x43fb60 | out: lppe=0x43fb60*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x654, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0127.826] CloseHandle (hObject=0x3b4) returned 1 [0127.826] OpenProcess (dwDesiredAccess=0x2000000, bInheritHandle=0, dwProcessId=0x674) returned 0x3b4 [0127.826] OpenProcessToken (in: ProcessHandle=0x3b4, DesiredAccess=0x6, TokenHandle=0x43fe04 | out: TokenHandle=0x43fe04*=0x3dc) returned 1 [0127.826] DuplicateToken (in: ExistingTokenHandle=0x3dc, ImpersonationLevel=0x2, DuplicateTokenHandle=0x43fe00 | out: DuplicateTokenHandle=0x43fe00*=0x3d0) returned 1 [0127.827] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x3e0 [0127.984] Thread32First (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.985] GetCurrentProcessId () returned 0xed4 [0127.985] GetCurrentThreadId () returned 0x140 [0127.986] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.986] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.987] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.988] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.988] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.989] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.990] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.990] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.991] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.992] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.992] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.993] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.994] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.995] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.995] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.996] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.997] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.997] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.998] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.999] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0127.999] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.000] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.001] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.002] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.002] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.003] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.004] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.005] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.005] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.006] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.007] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.008] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.008] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.009] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.010] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.011] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.012] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.013] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.015] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.016] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.016] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.017] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.018] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.018] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.019] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.020] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.020] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.021] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.022] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.022] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.023] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.024] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.024] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.025] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.026] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.027] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.028] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.028] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.029] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.029] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.030] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.031] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.031] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.032] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.033] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.033] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.034] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.035] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.035] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.036] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.037] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.037] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.038] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.039] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.039] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.040] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.041] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.042] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.042] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.043] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.044] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.045] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.046] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.047] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.048] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.049] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.050] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.051] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.052] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.053] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.054] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.055] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.056] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.057] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.058] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.059] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.060] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.061] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.062] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.063] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.063] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.064] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.065] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.066] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.067] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.068] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.069] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.070] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.071] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.071] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.072] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.072] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.073] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.074] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.074] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.075] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.076] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.076] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.077] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.078] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.078] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.079] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.080] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.080] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.081] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.082] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.083] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.083] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.084] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.085] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.085] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.086] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.087] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.088] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.088] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.089] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.090] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.090] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.091] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.092] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.092] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.093] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.094] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.095] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.096] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.096] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.097] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.098] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.099] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.100] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.101] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.102] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.103] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.104] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.105] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.106] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.107] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.108] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.109] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.110] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.111] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.111] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.112] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.113] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.114] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.115] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.116] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.117] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.118] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.120] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.121] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.122] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.123] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.123] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.124] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.125] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.125] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.129] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.129] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.130] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.131] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.131] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.132] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.133] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.133] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.134] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.135] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.135] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.136] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.137] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.137] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.138] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.138] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.139] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.140] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.141] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.141] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.142] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.142] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.143] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.144] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.144] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.145] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.146] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.147] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.148] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.149] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.150] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.152] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.153] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.153] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.154] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.155] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.156] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.157] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.158] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.159] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.160] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.161] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.162] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.163] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.164] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.165] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.165] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.166] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.167] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.168] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.169] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.170] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.171] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.172] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.173] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.174] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.175] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.176] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.176] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.177] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.178] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.179] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.180] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.181] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.182] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.183] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.184] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.185] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.186] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.187] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.188] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.188] Thread32Next (hSnapshot=0x3e0, lpte=0x43fd98) returned 1 [0128.404] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xee0) returned 0x3e4 [0128.405] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.405] CloseHandle (hObject=0x3e4) returned 1 [0128.406] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xae4) returned 0x3e4 [0128.406] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.406] CloseHandle (hObject=0x3e4) returned 1 [0128.407] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xebc) returned 0x3e4 [0128.407] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.407] CloseHandle (hObject=0x3e4) returned 1 [0128.407] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x338) returned 0x3e4 [0128.407] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.408] CloseHandle (hObject=0x3e4) returned 1 [0128.408] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xf90) returned 0x3e4 [0128.408] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.408] CloseHandle (hObject=0x3e4) returned 1 [0128.409] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x8fc) returned 0x3e4 [0128.409] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.409] CloseHandle (hObject=0x3e4) returned 1 [0128.409] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x6f8) returned 0x3e4 [0128.409] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.409] CloseHandle (hObject=0x3e4) returned 1 [0128.410] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x1174) returned 0x3e4 [0128.410] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.410] CloseHandle (hObject=0x3e4) returned 1 [0128.410] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdd8) returned 0x3e4 [0128.410] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.411] CloseHandle (hObject=0x3e4) returned 1 [0128.411] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdb4) returned 0x3e4 [0128.411] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.411] CloseHandle (hObject=0x3e4) returned 1 [0128.412] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdc8) returned 0x3e4 [0128.412] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.412] CloseHandle (hObject=0x3e4) returned 1 [0128.412] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x5e4) returned 0x3e4 [0128.412] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.412] CloseHandle (hObject=0x3e4) returned 1 [0128.413] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdb0) returned 0x3e4 [0128.413] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.413] CloseHandle (hObject=0x3e4) returned 1 [0128.413] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xd68) returned 0x3e4 [0128.413] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.414] CloseHandle (hObject=0x3e4) returned 1 [0128.414] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x1368) returned 0x3e4 [0128.414] SetThreadToken (Thread=0x43fdb8*=0x3e4, Token=0x3d0) returned 1 [0128.414] CloseHandle (hObject=0x3e4) returned 1 [0128.418] CloseHandle (hObject=0x3e0) returned 1 [0128.418] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e0 [0128.432] Process32FirstW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.433] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x85, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0128.434] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0128.435] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.436] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x170, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0128.437] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0128.438] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ac, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0128.439] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0128.440] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x210, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1b4, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0128.443] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x268, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.445] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x288, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.446] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x31c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1f0, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0128.447] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.448] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x36c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.451] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x37c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.452] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.453] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1e, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.454] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.455] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x43c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.456] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0128.457] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.458] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x3e4, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0128.459] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x608, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x268, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0128.460] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x644, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x208, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0128.461] Process32NextW (in: hSnapshot=0x3e0, lppe=0x43fb34 | out: lppe=0x43fb34*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x674, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2a, th32ParentProcessID=0x654, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0128.462] CloseHandle (hObject=0x3e0) returned 1 [0128.463] OpenProcess (dwDesiredAccess=0x2000000, bInheritHandle=0, dwProcessId=0x674) returned 0x3e0 [0128.463] OpenProcessToken (in: ProcessHandle=0x3e0, DesiredAccess=0xf01ff, TokenHandle=0x43fdbc | out: TokenHandle=0x43fdbc*=0x3e4) returned 1 [0128.463] CloseHandle (hObject=0x3e0) returned 1 [0128.463] ImpersonateLoggedOnUser (hToken=0x3e4) returned 1 [0128.467] CloseHandle (hObject=0x3e4) returned 1 [0128.467] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfffe) returned 0x1190bd0 [0128.467] GetDriveTypeW (lpRootPathName="\\\\?\\A:\\") returned 0x1 [0128.467] GetDriveTypeW (lpRootPathName="\\\\?\\B:\\") returned 0x1 [0128.468] GetDriveTypeW (lpRootPathName="\\\\?\\C:\\") returned 0x3 [0128.468] GetDriveTypeW (lpRootPathName="\\\\?\\D:\\") returned 0x1 [0128.468] GetDriveTypeW (lpRootPathName="\\\\?\\E:\\") returned 0x1 [0128.468] GetDriveTypeW (lpRootPathName="\\\\?\\F:\\") returned 0x1 [0128.468] GetDriveTypeW (lpRootPathName="\\\\?\\G:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\H:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\I:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\J:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\K:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\L:\\") returned 0x1 [0128.469] GetDriveTypeW (lpRootPathName="\\\\?\\M:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\N:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\O:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\P:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\Q:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\R:\\") returned 0x1 [0128.470] GetDriveTypeW (lpRootPathName="\\\\?\\S:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\T:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\U:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\V:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\W:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\X:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\Y:\\") returned 0x1 [0128.471] GetDriveTypeW (lpRootPathName="\\\\?\\Z:\\") returned 0x1 [0128.472] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0128.474] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fda4 | out: lphEnum=0x43fda4*=0x4f9008) returned 0x0 [0139.322] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0139.324] WNetEnumResourceW (in: hEnum=0x4f9008, lpcCount=0x43fda8, lpBuffer=0x1190bd0, lpBufferSize=0x43fda0 | out: lpcCount=0x43fda8, lpBuffer=0x1190bd0, lpBufferSize=0x43fda0) returned 0x103 [0139.325] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0139.326] WNetCloseEnum (hEnum=0x4f9008) returned 0x0 [0139.326] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd98 | out: lphEnum=0x43fd98*=0x4f8fb0) returned 0x0 [0161.905] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0161.907] WNetEnumResourceW (in: hEnum=0x4f8fb0, lpcCount=0x43fd9c, lpBuffer=0x1190bd0, lpBufferSize=0x43fd94 | out: lpcCount=0x43fd9c, lpBuffer=0x1190bd0, lpBufferSize=0x43fd94) returned 0x0 [0161.908] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bd0, lphEnum=0x43fd54 | out: lphEnum=0x43fd54*=0x4f9428) returned 0x0 [0182.766] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1194bd8 [0182.766] WNetEnumResourceW (in: hEnum=0x4f9428, lpcCount=0x43fd58, lpBuffer=0x1194bd8, lpBufferSize=0x43fd50 | out: lpcCount=0x43fd58, lpBuffer=0x1194bd8, lpBufferSize=0x43fd50) returned 0x0 [0182.766] WNetEnumResourceW (in: hEnum=0x4f9428, lpcCount=0x43fd58, lpBuffer=0x1194bd8, lpBufferSize=0x43fd50 | out: lpcCount=0x43fd58, lpBuffer=0x1194bd8, lpBufferSize=0x43fd50) returned 0x103 [0182.767] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1194bd8) returned 1 [0182.776] WNetCloseEnum (hEnum=0x4f9428) returned 0x0 [0182.776] WNetEnumResourceW (in: hEnum=0x4f8fb0, lpcCount=0x43fd9c, lpBuffer=0x1190bd0, lpBufferSize=0x43fd94 | out: lpcCount=0x43fd9c, lpBuffer=0x1190bd0, lpBufferSize=0x43fd94) returned 0x103 [0182.776] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0182.785] WNetCloseEnum (hEnum=0x4f8fb0) returned 0x0 [0182.785] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd8c | out: lphEnum=0x43fd8c*=0x4ccf60) returned 0x0 [0182.786] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0182.789] WNetEnumResourceW (in: hEnum=0x4ccf60, lpcCount=0x43fd90, lpBuffer=0x1190bd0, lpBufferSize=0x43fd88 | out: lpcCount=0x43fd90, lpBuffer=0x1190bd0, lpBufferSize=0x43fd88) returned 0x0 [0182.789] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bd0, lphEnum=0x43fd48 | out: lphEnum=0x43fd48*=0x4f19b0) returned 0x0 [0182.797] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1194bd8 [0182.798] WNetEnumResourceW (in: hEnum=0x4f19b0, lpcCount=0x43fd4c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd44 | out: lpcCount=0x43fd4c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd44) returned 0x103 [0182.798] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1194bd8) returned 1 [0182.800] WNetCloseEnum (hEnum=0x4f19b0) returned 0x0 [0182.800] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bf0, lphEnum=0x43fd48 | out: lphEnum=0x43fd48*=0x4f19b0) returned 0x4b8 [0193.875] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190c10, lphEnum=0x43fd48 | out: lphEnum=0x43fd48*=0x4f19b0) returned 0x4c6 [0193.879] WNetEnumResourceW (in: hEnum=0x4ccf60, lpcCount=0x43fd90, lpBuffer=0x1190bd0, lpBufferSize=0x43fd88 | out: lpcCount=0x43fd90, lpBuffer=0x1190bd0, lpBufferSize=0x43fd88) returned 0x103 [0193.879] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0193.883] WNetCloseEnum (hEnum=0x4ccf60) returned 0x0 [0193.883] RevertToSelf () returned 1 [0193.883] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x3b8 [0193.896] Thread32First (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.897] GetCurrentProcessId () returned 0xed4 [0193.898] GetCurrentThreadId () returned 0x140 [0193.898] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.899] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.900] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.901] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.902] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.903] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.904] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.906] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.907] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.908] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.909] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.913] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.914] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.915] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.916] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.917] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.918] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.919] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.920] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.920] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.922] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.923] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.924] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.925] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.925] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.926] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.927] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.927] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.928] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.929] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.930] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.930] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.931] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.932] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.933] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.933] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.935] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.937] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.938] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.939] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.940] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.941] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.945] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.946] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.947] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.953] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.954] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.956] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.957] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.958] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.959] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.960] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.961] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.962] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.963] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.966] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.967] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.968] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.969] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.970] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.971] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.972] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.973] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.974] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.975] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.976] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.977] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.978] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.979] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.979] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.980] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.981] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.982] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.982] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.983] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.984] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.985] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.985] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.986] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.987] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.988] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.989] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.989] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.990] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.990] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.991] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.993] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.994] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.994] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.995] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.996] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.997] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.997] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.998] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.999] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0193.999] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.000] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.001] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.002] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.002] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.003] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.004] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.005] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.005] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.006] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.007] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.008] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.008] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.009] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.010] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.011] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.012] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.012] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.013] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.014] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.015] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.015] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.016] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.017] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.018] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.019] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.019] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.020] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.021] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.022] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.023] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.024] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.025] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.026] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.026] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.027] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.028] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.029] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.029] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.030] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.031] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.031] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.032] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.033] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.034] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.034] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.035] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.036] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.037] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.038] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.038] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.039] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.040] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.041] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.041] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.042] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.043] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.043] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.044] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.045] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.046] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.047] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.047] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.048] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.049] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.050] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.050] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.051] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.052] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.053] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.054] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.055] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.056] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.057] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.058] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.059] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.060] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.061] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.062] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.063] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.064] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.065] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.066] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.067] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.068] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.069] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.070] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.071] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.072] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.073] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.073] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.074] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.075] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.077] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.078] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.079] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.081] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.082] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.082] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.083] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.084] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.085] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.086] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.087] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.088] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.089] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.090] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.091] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.092] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.093] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.093] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.094] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.096] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.097] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.098] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.099] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.100] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.101] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.102] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.103] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.104] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.105] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.105] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.106] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.107] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.108] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.109] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.110] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.111] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.112] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.113] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.114] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.115] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.115] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.116] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.117] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.118] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.119] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.120] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.121] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.122] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.123] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.124] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.124] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.125] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.126] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.127] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.128] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.129] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.130] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.131] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.132] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.133] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.134] Thread32Next (hSnapshot=0x3b8, lpte=0x43fd70) returned 1 [0194.360] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xee0) returned 0x424 [0194.360] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.360] CloseHandle (hObject=0x424) returned 1 [0194.361] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x338) returned 0x424 [0194.361] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.362] CloseHandle (hObject=0x424) returned 1 [0194.362] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xf90) returned 0x424 [0194.362] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.362] CloseHandle (hObject=0x424) returned 1 [0194.363] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x8fc) returned 0x424 [0194.363] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.363] CloseHandle (hObject=0x424) returned 1 [0194.363] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x6f8) returned 0x424 [0194.363] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.363] CloseHandle (hObject=0x424) returned 1 [0194.364] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x1174) returned 0x424 [0194.364] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.364] CloseHandle (hObject=0x424) returned 1 [0194.364] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdd8) returned 0x424 [0194.364] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.364] CloseHandle (hObject=0x424) returned 1 [0194.365] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdb4) returned 0x424 [0194.365] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.365] CloseHandle (hObject=0x424) returned 1 [0194.365] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdc8) returned 0x424 [0194.365] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.366] CloseHandle (hObject=0x424) returned 1 [0194.366] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x5e4) returned 0x424 [0194.366] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.366] CloseHandle (hObject=0x424) returned 1 [0194.367] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xdb0) returned 0x424 [0194.367] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.367] CloseHandle (hObject=0x424) returned 1 [0194.367] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xd68) returned 0x424 [0194.367] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.367] CloseHandle (hObject=0x424) returned 1 [0194.368] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0x1368) returned 0x424 [0194.368] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.368] CloseHandle (hObject=0x424) returned 1 [0194.368] OpenThread (dwDesiredAccess=0x80, bInheritHandle=0, dwThreadId=0xee8) returned 0x424 [0194.369] SetThreadToken (Thread=0x43fd90*=0x424, Token=0x0) returned 1 [0194.369] CloseHandle (hObject=0x424) returned 1 [0194.374] CloseHandle (hObject=0x3b8) returned 1 [0194.374] WNetOpenEnumW (in: dwScope=0x1, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd7c | out: lphEnum=0x43fd7c*=0x4f9378) returned 0x0 [0194.703] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0194.705] WNetEnumResourceW (in: hEnum=0x4f9378, lpcCount=0x43fd80, lpBuffer=0x1190bd0, lpBufferSize=0x43fd78 | out: lpcCount=0x43fd80, lpBuffer=0x1190bd0, lpBufferSize=0x43fd78) returned 0x103 [0194.705] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0194.705] WNetCloseEnum (hEnum=0x4f9378) returned 0x0 [0194.705] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd70 | out: lphEnum=0x43fd70*=0x4f9740) returned 0x0 [0204.655] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0204.655] WNetEnumResourceW (in: hEnum=0x4f9740, lpcCount=0x43fd74, lpBuffer=0x1190bd0, lpBufferSize=0x43fd6c | out: lpcCount=0x43fd74, lpBuffer=0x1190bd0, lpBufferSize=0x43fd6c) returned 0x0 [0204.656] WNetOpenEnumW (in: dwScope=0x5, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bd0, lphEnum=0x43fd2c | out: lphEnum=0x43fd2c*=0x4f9950) returned 0x0 [0204.711] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1194bd8 [0204.711] WNetEnumResourceW (in: hEnum=0x4f9950, lpcCount=0x43fd30, lpBuffer=0x1194bd8, lpBufferSize=0x43fd28 | out: lpcCount=0x43fd30, lpBuffer=0x1194bd8, lpBufferSize=0x43fd28) returned 0x0 [0204.711] WNetEnumResourceW (in: hEnum=0x4f9950, lpcCount=0x43fd30, lpBuffer=0x1194bd8, lpBufferSize=0x43fd28 | out: lpcCount=0x43fd30, lpBuffer=0x1194bd8, lpBufferSize=0x43fd28) returned 0x103 [0204.711] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1194bd8) returned 1 [0204.712] WNetCloseEnum (hEnum=0x4f9950) returned 0x0 [0204.712] WNetEnumResourceW (in: hEnum=0x4f9740, lpcCount=0x43fd74, lpBuffer=0x1190bd0, lpBufferSize=0x43fd6c | out: lpcCount=0x43fd74, lpBuffer=0x1190bd0, lpBufferSize=0x43fd6c) returned 0x103 [0204.712] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0204.715] WNetCloseEnum (hEnum=0x4f9740) returned 0x0 [0204.715] WNetOpenEnumW (in: dwScope=0x3, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fda8 | out: lphEnum=0x43fda8*=0x4f19b0) returned 0x0 [0204.715] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0204.716] WNetEnumResourceW (in: hEnum=0x4f19b0, lpcCount=0x43fdac, lpBuffer=0x1190bd0, lpBufferSize=0x43fda4 | out: lpcCount=0x43fdac, lpBuffer=0x1190bd0, lpBufferSize=0x43fda4) returned 0x103 [0204.716] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0204.716] WNetCloseEnum (hEnum=0x4f19b0) returned 0x0 [0204.716] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd9c | out: lphEnum=0x43fd9c*=0x4ccde0) returned 0x0 [0204.716] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0204.716] WNetEnumResourceW (in: hEnum=0x4ccde0, lpcCount=0x43fda0, lpBuffer=0x1190bd0, lpBufferSize=0x43fd98 | out: lpcCount=0x43fda0, lpBuffer=0x1190bd0, lpBufferSize=0x43fd98) returned 0x0 [0204.717] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bd0, lphEnum=0x43fd58 | out: lphEnum=0x43fd58*=0x4f1ab0) returned 0x0 [0204.717] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1194bd8 [0204.718] WNetEnumResourceW (in: hEnum=0x4f1ab0, lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54 | out: lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54) returned 0x103 [0204.718] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1194bd8) returned 1 [0204.719] WNetCloseEnum (hEnum=0x4f1ab0) returned 0x0 [0204.719] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190bf0, lphEnum=0x43fd58 | out: lphEnum=0x43fd58*=0x4f1bf0) returned 0x0 [0205.138] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1194bd8 [0205.142] WNetEnumResourceW (in: hEnum=0x4f1bf0, lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54 | out: lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54) returned 0x0 [0205.142] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1194bd8, lphEnum=0x43fd14 | out: lphEnum=0x43fd14*=0x4f1930) returned 0x0 [0205.204] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1198be0 [0205.205] WNetEnumResourceW (in: hEnum=0x4f1930, lpcCount=0x43fd18, lpBuffer=0x1198be0, lpBufferSize=0x43fd10 | out: lpcCount=0x43fd18, lpBuffer=0x1198be0, lpBufferSize=0x43fd10) returned 0x103 [0205.205] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1198be0) returned 1 [0205.205] WNetCloseEnum (hEnum=0x4f1930) returned 0x0 [0205.205] WNetEnumResourceW (in: hEnum=0x4f1bf0, lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54 | out: lpcCount=0x43fd5c, lpBuffer=0x1194bd8, lpBufferSize=0x43fd54) returned 0x103 [0205.205] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1194bd8) returned 1 [0205.206] WNetCloseEnum (hEnum=0x4f1bf0) returned 0x0 [0205.206] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x1190c10, lphEnum=0x43fd58 | out: lphEnum=0x43fd58*=0x4f1bf0) returned 0x4c6 [0205.207] WNetEnumResourceW (in: hEnum=0x4ccde0, lpcCount=0x43fda0, lpBuffer=0x1190bd0, lpBufferSize=0x43fd98 | out: lpcCount=0x43fda0, lpBuffer=0x1190bd0, lpBufferSize=0x43fd98) returned 0x103 [0205.207] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0205.209] WNetCloseEnum (hEnum=0x4ccde0) returned 0x0 [0205.209] WNetOpenEnumW (in: dwScope=0x4, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x43fd90 | out: lphEnum=0x43fd90*=0x4f18d0) returned 0x0 [0205.210] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4000) returned 0x1190bd0 [0205.211] WNetEnumResourceW (in: hEnum=0x4f18d0, lpcCount=0x43fd94, lpBuffer=0x1190bd0, lpBufferSize=0x43fd8c | out: lpcCount=0x43fd94, lpBuffer=0x1190bd0, lpBufferSize=0x43fd8c) returned 0x103 [0205.211] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1190bd0) returned 1 [0205.211] WNetCloseEnum (hEnum=0x4f18d0) returned 0x0 [0205.211] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.211] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.213] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.213] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.214] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.214] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.215] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.215] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.216] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.216] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.217] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.217] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.217] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.218] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.218] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.218] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x0) returned 1 [0205.220] GetSystemInfo (in: lpSystemInfo=0x43fdcc | out: lpSystemInfo=0x43fdcc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0205.220] HeapDestroy (hHeap=0x37d0000) returned 1 [0205.230] CloseHandle (hObject=0x3a8) returned 1 [0205.230] GetDC (hWnd=0x0) returned 0x401018d [0205.231] CreateCompatibleDC (hdc=0x401018d) returned 0x270106a6 [0205.231] GetDeviceCaps (hdc=0x401018d, index=8) returned 1440 [0205.231] GetDeviceCaps (hdc=0x401018d, index=10) returned 900 [0205.231] CreateCompatibleBitmap (hdc=0x401018d, cx=1440, cy=900) returned 0x600506a9 [0205.261] SelectObject (hdc=0x270106a6, h=0x600506a9) returned 0x185000f [0205.262] GetDeviceCaps (hdc=0x401018d, index=90) returned 96 [0205.262] MulDiv (nNumber=18, nNumerator=96, nDenominator=72) returned 24 [0205.262] CreateFontW (cHeight=-24, cWidth=0, cEscapement=0, cOrientation=0, cWeight=0, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x1, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x4, iPitchAndFamily=0x0, pszFaceName=0x0) returned 0x580a06a5 [0205.262] SelectObject (hdc=0x270106a6, h=0x580a06a5) returned 0x18a0048 [0205.262] SetBkMode (hdc=0x270106a6, mode=1) returned 2 [0205.262] SetTextColor (hdc=0x270106a6, color=0xffffff) returned 0x0 [0205.262] GetStockObject (i=2) returned 0x1900012 [0205.262] FillRect (hDC=0x270106a6, lprc=0x43fe3c, hbr=0x1900012) returned 1 [0210.512] DrawTextW (in: hdc=0x270106a6, lpchText="All of your files are encrypted!\r\n\r\nFind 1yg4ztc5-readme.txt and follow instuctions", cchText=-1, lprc=0x43fe3c, format=0x11 | out: lpchText="All of your files are encrypted!\r\n\r\nFind 1yg4ztc5-readme.txt and follow instuctions", lprc=0x43fe3c) returned 87 [0210.567] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x16) returned 0x117d5c8 [0210.568] GetTempPathW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0210.568] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x4c) returned 0x1183648 [0210.568] GetTempPathW (in: nBufferLength=0x26, lpBuffer=0x1183648 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0210.568] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x60) returned 0x11836a0 [0210.568] GetObjectW (in: h=0x600506a9, c=24, pv=0x43fdf0 | out: pv=0x43fdf0) returned 24 [0210.569] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x4dedd0 [0210.586] GetDIBits (in: hdc=0x401018d, hbm=0x600506a9, start=0x0, cLines=0x384, lpvBits=0x5005020, lpbmi=0x4dedd0, usage=0x0 | out: lpvBits=0x5005020, lpbmi=0x4dedd0) returned 900 [0210.657] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\acytgo.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\acytgo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x444 [0210.660] WriteFile (in: hFile=0x444, lpBuffer=0x43fe08*, nNumberOfBytesToWrite=0xe, lpNumberOfBytesWritten=0x43fe18, lpOverlapped=0x0 | out: lpBuffer=0x43fe08*, lpNumberOfBytesWritten=0x43fe18*=0xe, lpOverlapped=0x0) returned 1 [0210.662] WriteFile (in: hFile=0x444, lpBuffer=0x4dedd0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x43fe18, lpOverlapped=0x0 | out: lpBuffer=0x4dedd0*, lpNumberOfBytesWritten=0x43fe18*=0x28, lpOverlapped=0x0) returned 1 [0210.662] WriteFile (in: hFile=0x444, lpBuffer=0x5005020*, nNumberOfBytesToWrite=0x4f1a00, lpNumberOfBytesWritten=0x43fe18, lpOverlapped=0x0 | out: lpBuffer=0x5005020*, lpNumberOfBytesWritten=0x43fe18*=0x4f1a00, lpOverlapped=0x0) returned 1 [0210.798] CloseHandle (hObject=0x444) returned 1 [0211.005] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\acytgo.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\acytgo.bmp"), fWinIni=0x3 | out: pvParam=0x11836a0) returned 1 [0212.556] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a0) returned 1 [0212.556] DeleteObject (ho=0x580a06a5) returned 1 [0212.556] DeleteObject (ho=0x600506a9) returned 1 [0212.556] DeleteDC (hdc=0x270106a6) returned 1 [0212.556] ReleaseDC (hWnd=0x0, hDC=0x401018d) returned 1 [0212.557] SetThreadExecutionState (esFlags=0x80000000) returned 0x80000001 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e130) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185340) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c087d8) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185148) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d108) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08808) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e110) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11853a0) returned 1 [0212.561] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c087a8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e120) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117da70) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c086a0) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117da40) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1184fb8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08688) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e070) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117da88) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c086b8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11853d0) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185468) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08730) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185310) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d0e8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08748) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185328) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d228) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08760) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185370) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185440) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08700) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185490) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11854b8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08778) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11853b8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11853e8) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c086d0) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185388) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d368) returned 1 [0212.562] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c087c0) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185040) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d3a8) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08008) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0b0) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185130) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c087f0) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d068) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11854f8) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08790) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d3c8) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185410) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c086e8) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dfa0) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185358) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c08718) returned 1 [0212.563] RtlFreeHeap (HeapHandle=0x2810000, Flags=0x0, BaseAddress=0x2c085a8) returned 1 [0212.563] HeapDestroy (hHeap=0x2810000) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185280) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d2c8) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a86d0) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185220) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d388) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8748) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185118) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d0a8) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8778) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11850e8) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11855a0) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8730) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185208) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185578) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8718) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d848) returned 1 [0212.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d878) returned 1 [0212.575] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8790) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11851a8) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185528) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a86b8) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df70) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185058) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8688) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11850d0) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d048) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8700) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185070) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d008) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a86a0) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185100) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d2e8) returned 1 [0212.588] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a8760) returned 1 [0212.608] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11852b0) returned 1 [0212.608] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185550) returned 1 [0212.608] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a86e8) returned 1 [0212.608] RtlFreeHeap (HeapHandle=0x2cb0000, Flags=0x0, BaseAddress=0x30a85a8) returned 1 [0212.608] HeapDestroy (hHeap=0x2cb0000) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185848) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185828) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8168) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dfe0) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e000) returned 1 [0212.619] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8700) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e090) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185178) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c86b8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11855f8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185648) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c80a8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185728) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185190) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8008) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185a68) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185250) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caa98) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185898) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858c8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8060) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185688) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185618) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c80c0) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e040) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0d0) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8748) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185938) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858e8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33ca930) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11851c0) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d128) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caac8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185808) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185948) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c81f8) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185868) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185878) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c81e0) returned 1 [0212.620] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185758) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185768) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8108) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185978) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185010) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33cabb8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185968) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185838) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8138) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185748) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185298) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8090) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857a8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856d8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8048) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185738) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857c8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c87a8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e100) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857e8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8778) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d588) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d748) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33ca960) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185678) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856a8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8180) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df80) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df40) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8688) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185b38) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185bb8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caab0) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857f8) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185958) returned 1 [0212.621] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8210) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185af8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185b28) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33ca9c0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858f8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185908) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caba0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858a8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185088) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8198) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0a0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e030) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8730) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857d8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185628) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c87f0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185658) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185608) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c80f0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185698) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856c8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c87d8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856b8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856e8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8120) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11851d8) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11859d0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8808) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e050) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e0f0) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8760) returned 1 [0212.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e010) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e020) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8718) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858b8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11858d8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c81c8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117df50) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185160) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c86d0) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185998) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11859a8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33ca8d0) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185918) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185928) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caa20) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185638) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11856f8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c87c0) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185988) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11859b8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33ca9a8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185718) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11857b8) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8790) returned 1 [0212.623] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dfc0) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dfd0) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c86e8) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185888) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185818) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c80d8) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185778) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185788) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8150) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117dfb0) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117e080) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c86a0) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11852c8) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d028) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x33caaf8) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185798) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185858) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c81b0) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185708) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185668) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c8078) returned 1 [0212.624] RtlFreeHeap (HeapHandle=0x30d0000, Flags=0x0, BaseAddress=0x34c85a8) returned 1 [0212.624] HeapDestroy (hHeap=0x30d0000) returned 1 [0212.636] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11851f0) returned 1 [0212.636] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185a78) returned 1 [0212.636] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d088) returned 1 [0212.636] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1185ba8) returned 1 [0212.636] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11852e0) returned 1 [0212.640] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x11ffcf0, nSize=0x106 | out: lpFilename="C:\\Windows\\MsMpEng.exe" (normalized: "c:\\windows\\msmpeng.exe")) returned 0x16 [0212.640] MoveFileExW (lpExistingFileName="C:\\Windows\\MsMpEng.exe" (normalized: "c:\\windows\\msmpeng.exe"), lpNewFileName=0x0, dwFlags=0x4) returned 1 [0212.643] ExitProcess (uExitCode=0x0) [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x4917e0 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a880 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48e0d8 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48ef18 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48edd0 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490f58 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a198 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48ee18 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48e430 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a998 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490f98 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x489f38 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a1b8 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48e508 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490690 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490708 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a920 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a8d0 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490750 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a1d8 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a218 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a948 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48dbf0 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48dee0 | out: hHeap=0x480000) returned 1 [0212.660] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48a9c0 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x4907a0 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x489f58 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48e3e8 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x489f78 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48df88 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48df18 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x4910c8 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48d9c0 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x491128 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48c160 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x4911e8 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x4905f8 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x48ab00 | out: hHeap=0x480000) returned 1 [0212.661] HeapFree (in: hHeap=0x480000, dwFlags=0x0, lpMem=0x490818 | out: hHeap=0x480000) returned 1 Thread: id = 6 os_tid = 0xebc Thread: id = 7 os_tid = 0x338 Thread: id = 8 os_tid = 0xf90 [0182.938] ?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z () returned 0x0 [0182.939] ?QueryInterface@CWbemObject@@UAGJABU_GUID@@PAPAX@Z () returned 0x0 [0182.939] ?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z () returned 0x0 [0182.940] lstrcmpiW (lpString1="Win32_Process", lpString2="Win32_Service") returned -1 [0182.940] lstrcmpiW (lpString1="Win32_Process", lpString2="Win32_Process") returned 0 [0182.940] ?Get@CWbemObject@@UAGJPBGJPAUtagVARIANT@@PAJ2@Z () returned 0x0 [0182.941] IWbemServices:ExecMethod (in: This=0x4bbf40, strObjectPath="\\\\XC64ZB\\root\\CIMV2:Win32_Process.Handle=\"5116\"", strMethodName="GetOwner", lFlags=0, pCtx=0x0, pInParams=0x0, ppOutParams=0x270ec00*=0x0, ppCallResult=0x0 | out: ppOutParams=0x270ec00*=0x4f79c0, ppCallResult=0x0) returned 0x0 [0186.597] IWbemClassObject:Get (in: This=0x4f79c0, wszName="User", lFlags=0, pVal=0x270eb74*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270eb74*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RDhJ0CNFevzX", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0186.597] IWbemClassObject:Get (in: This=0x4f79c0, wszName="Domain", lFlags=0, pVal=0x270eb64*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270eb64*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0186.597] IWbemClassObject:Get (in: This=0x4f7d18, wszName="Name", lFlags=0, pVal=0x270ebf0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270ebf0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="dllhost.exe", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0186.597] IUnknown:Release (This=0x4f7d18) returned 0x0 [0186.597] IUnknown:Release (This=0x4f79c0) returned 0x0 [0198.282] IWbemClassObject:Get (in: This=0x4f79c0, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4f7cf0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.282] IUnknown:QueryInterface (in: This=0x4f7cf0, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x4f7cf0) returned 0x0 [0198.282] IWbemClassObject:Get (in: This=0x4f7cf0, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Process", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.283] lstrcmpiW (lpString1="Win32_Process", lpString2="Win32_Service") returned -1 [0198.283] lstrcmpiW (lpString1="Win32_Process", lpString2="Win32_Process") returned 0 [0198.283] IWbemClassObject:Get (in: This=0x4f7cf0, wszName="__PATH", lFlags=0, pVal=0x270f088*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f088*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\XC64ZB\\root\\CIMV2:Win32_Process.Handle=\"1692\"", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.283] IWbemServices:ExecMethod (in: This=0x4bbf40, strObjectPath="\\\\XC64ZB\\root\\CIMV2:Win32_Process.Handle=\"1692\"", strMethodName="GetOwner", lFlags=0, pCtx=0x0, pInParams=0x0, ppOutParams=0x270f0c8*=0x0, ppCallResult=0x0 | out: ppOutParams=0x270f0c8*=0x501298, ppCallResult=0x0) returned 0x0 [0198.430] IWbemClassObject:Get (in: This=0x501298, wszName="User", lFlags=0, pVal=0x270f03c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f03c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="RDhJ0CNFevzX", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.430] IWbemClassObject:Get (in: This=0x501298, wszName="Domain", lFlags=0, pVal=0x270f02c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f02c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="XC64ZB", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.430] IWbemClassObject:Get (in: This=0x4f7cf0, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="SkypeHost.exe", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0198.431] IUnknown:Release (This=0x4f7cf0) returned 0x0 [0198.431] IUnknown:Release (This=0x501298) returned 0x0 [0211.629] IWbemClassObject:Get (in: This=0x4f79c0, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.629] IUnknown:QueryInterface (in: This=0x4ffbf0, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x4ffbf0) returned 0x0 [0211.629] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Service", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] lstrcmpiW (lpString1="Win32_Service", lpString2="Win32_Service") returned 0 [0211.630] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="BITS", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="State", lFlags=0, pVal=0x270f06c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f06c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Stopped", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IUnknown:Release (This=0x4ffbf0) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x4ff590, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IUnknown:QueryInterface (in: This=0x4ffbf0, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x4ffbf0) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eeb7c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Service", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] lstrcmpiW (lpString1="Win32_Service", lpString2="Win32_Service") returned 0 [0211.630] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ee9ec, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Browser", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="State", lFlags=0, pVal=0x270f06c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eed34, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f06c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Running", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IUnknown:Release (This=0x4ffbf0) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x4ff728, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x522690, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.630] IUnknown:QueryInterface (in: This=0x522690, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x522690) returned 0x0 [0211.630] IWbemClassObject:Get (in: This=0x522690, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eeb7c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Service", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] lstrcmpiW (lpString1="Win32_Service", lpString2="Win32_Service") returned 0 [0211.631] IWbemClassObject:Get (in: This=0x522690, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ee9ec, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="UsoSvc", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] IWbemClassObject:Get (in: This=0x522690, wszName="State", lFlags=0, pVal=0x270f06c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eed34, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f06c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Stopped", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] lstrcmpiW (lpString1="Stopped", lpString2="Running") returned 1 [0211.631] IUnknown:Release (This=0x522690) returned 0x0 [0211.631] IWbemClassObject:Get (in: This=0x4ff8c0, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x522690, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] IUnknown:QueryInterface (in: This=0x4ffbf0, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x4ffbf0) returned 0x0 [0211.631] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eeb7c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Service", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] lstrcmpiW (lpString1="Win32_Service", lpString2="Win32_Service") returned 0 [0211.631] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ee9ec, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="WbioSrvc", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="State", lFlags=0, pVal=0x270f06c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eed34, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f06c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Stopped", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.631] IUnknown:Release (This=0x4ffbf0) returned 0x0 [0211.632] IWbemClassObject:Get (in: This=0x4ffa58, wszName="TargetInstance", lFlags=0, pVal=0x270f0a8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0a8*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ffbf0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.632] IUnknown:QueryInterface (in: This=0x4ffbf0, riid=0x96e138*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x270f0cc | out: ppvObject=0x270f0cc*=0x4ffbf0) returned 0x0 [0211.632] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="__CLASS", lFlags=0, pVal=0x270f098*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eeb7c, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f098*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_Service", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.632] lstrcmpiW (lpString1="Win32_Service", lpString2="Win32_Service") returned 0 [0211.632] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="Name", lFlags=0, pVal=0x270f0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4ee9ec, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="wuauserv", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.632] IWbemClassObject:Get (in: This=0x4ffbf0, wszName="State", lFlags=0, pVal=0x270f06c*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4eed34, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x270f06c*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Stopped", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0211.632] IUnknown:Release (This=0x4ffbf0) returned 0x0 Thread: id = 9 os_tid = 0x8fc [0097.340] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0097.341] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0099.641] CoCreateInstance (in: rclsid=0x96e168*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x96e188*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x278ff78 | out: ppv=0x278ff78*=0x4c17d0) returned 0x0 [0100.873] WbemLocator:IWbemLocator:ConnectServer (in: This=0x4c17d0, strNetworkResource="ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x278ff7c | out: ppNamespace=0x278ff7c*=0x4bbf40) returned 0x0 [0106.691] CoSetProxyBlanket (pProxy=0x4bbf40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x3, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0106.691] CoCreateInstance (in: rclsid=0x96e178*(Data1=0x49bd2028, Data2=0x1523, Data3=0x11d1, Data4=([0]=0xad, [1]=0x79, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), pUnkOuter=0x0, dwClsContext=0x4, riid=0x96e128*(Data1=0x1cfaba8c, Data2=0x1523, Data3=0x11d1, Data4=([0]=0xad, [1]=0x79, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), ppv=0x278ff70 | out: ppv=0x278ff70*=0x4cf664) returned 0x0 [0112.884] WbemLocator:IUnknown:AddRef (This=0x4bbf40) returned 0x2 [0112.884] UnsecuredApartment:IUnsecuredApartment:CreateObjectStub (in: This=0x4cf664, pObject=0x971054, ppStub=0x278ff6c | out: ppStub=0x278ff6c*=0x4f1290) returned 0x0 [0112.922] UnsecuredApartment:IUnknown:QueryInterface (in: This=0x4f1290, riid=0x96e118*(Data1=0x7c857801, Data2=0x7381, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x278ff74 | out: ppvObject=0x278ff74*=0x4de514) returned 0x0 [0112.933] IWbemServices:ExecNotificationQueryAsync (This=0x4bbf40, strQueryLanguage="WQL", strQuery="SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'", lFlags=128, pCtx=0x0, pResponseHandler=0x4de514) returned 0x0 [0119.948] IWbemServices:ExecNotificationQueryAsync (This=0x4bbf40, strQueryLanguage="WQL", strQuery="SELECT * FROM __InstanceModificationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Service'", lFlags=128, pCtx=0x0, pResponseHandler=0x4de514) returned 0x0 [0202.111] GetCurrentProcess () returned 0xffffffff [0202.112] WaitForSingleObject (hHandle=0xffffffff, dwMilliseconds=0xffffffff) Thread: id = 120 os_tid = 0x6f8 Thread: id = 134 os_tid = 0x1174 [0114.109] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x369ff78, lpCompletionKey=0x369ff74, lpOverlapped=0x369ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x369ff78, lpCompletionKey=0x369ff74, lpOverlapped=0x369ff7c) returned 1 Thread: id = 135 os_tid = 0xdd8 [0114.111] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x371ff78, lpCompletionKey=0x371ff74, lpOverlapped=0x371ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x371ff78, lpCompletionKey=0x371ff74, lpOverlapped=0x371ff7c) returned 1 Thread: id = 136 os_tid = 0xdb4 [0114.112] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x379ff78, lpCompletionKey=0x379ff74, lpOverlapped=0x379ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x379ff78, lpCompletionKey=0x379ff74, lpOverlapped=0x379ff7c) returned 1 Thread: id = 137 os_tid = 0xdc8 [0114.113] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3c5ff78, lpCompletionKey=0x3c5ff74, lpOverlapped=0x3c5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3c5ff78, lpCompletionKey=0x3c5ff74, lpOverlapped=0x3c5ff7c) returned 1 Thread: id = 138 os_tid = 0x5e4 [0114.115] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3cdff78, lpCompletionKey=0x3cdff74, lpOverlapped=0x3cdff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3cdff78, lpCompletionKey=0x3cdff74, lpOverlapped=0x3cdff7c) returned 1 Thread: id = 139 os_tid = 0xdb0 [0114.116] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3d5ff78, lpCompletionKey=0x3d5ff74, lpOverlapped=0x3d5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3d5ff78, lpCompletionKey=0x3d5ff74, lpOverlapped=0x3d5ff7c) returned 1 Thread: id = 140 os_tid = 0xd68 [0114.118] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0124.671] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1aa6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.671] RtlGetLastWin32Error () returned 0x3e5 [0124.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0124.671] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x1aa6, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.677] RtlGetLastWin32Error () returned 0x3e5 [0124.677] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.692] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4714, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.692] RtlGetLastWin32Error () returned 0x3e5 [0125.692] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.693] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x4714, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.694] RtlGetLastWin32Error () returned 0x3e5 [0125.694] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.694] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4714, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.694] RtlGetLastWin32Error () returned 0x3e5 [0125.694] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.694] RtlGetLastWin32Error () returned 0x26 [0125.694] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.695] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.695] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.695] RtlGetLastWin32Error () returned 0x3e5 [0125.695] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.695] CloseHandle (hObject=0x3d8) returned 1 [0125.700] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183a48 [0125.700] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\tmjvG4lm-mwGUnkAQc.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\tmjvg4lm-mwgunkaqc.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\tmjvG4lm-mwGUnkAQc.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\tmjvg4lm-mwgunkaqc.wav.1yg4ztc5")) returned 1 [0125.701] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b90) returned 1 [0125.701] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.701] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.702] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.704] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4cd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.704] RtlGetLastWin32Error () returned 0x3e5 [0125.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.705] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x4cd, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.705] RtlGetLastWin32Error () returned 0x3e5 [0125.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.705] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4cd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.705] RtlGetLastWin32Error () returned 0x3e5 [0125.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.705] RtlGetLastWin32Error () returned 0x26 [0125.705] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.705] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.706] RtlGetLastWin32Error () returned 0x3e5 [0125.706] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.706] CloseHandle (hObject=0x3d8) returned 1 [0125.707] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183ac0 [0125.707] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\wk9oyeTx5Wxu-aAZVD.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\wk9oyetx5wxu-aazvd.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\wk9oyeTx5Wxu-aAZVD.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\wk9oyetx5wxu-aazvd.mp3.1yg4ztc5")) returned 1 [0125.708] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.708] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac0) returned 1 [0125.709] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.709] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.720] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb779, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.721] RtlGetLastWin32Error () returned 0x3e5 [0125.721] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.721] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb779, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.722] RtlGetLastWin32Error () returned 0x3e5 [0125.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.722] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb779, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.722] RtlGetLastWin32Error () returned 0x3e5 [0125.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.722] RtlGetLastWin32Error () returned 0x26 [0125.722] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.722] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.723] RtlGetLastWin32Error () returned 0x3e5 [0125.723] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.723] CloseHandle (hObject=0x3d8) returned 1 [0125.725] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd6) returned 0x1183aa8 [0125.725] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\0GKL.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\0gkl.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\0GKL.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\0gkl.gif.1yg4ztc5")) returned 1 [0125.726] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.726] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0125.726] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.727] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.734] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3dd3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.734] RtlGetLastWin32Error () returned 0x3e5 [0125.734] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.734] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x3dd3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.735] RtlGetLastWin32Error () returned 0x3e5 [0125.735] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.735] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3dd3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.735] RtlGetLastWin32Error () returned 0x3e5 [0125.735] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.735] RtlGetLastWin32Error () returned 0x26 [0125.736] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.736] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.736] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.736] RtlGetLastWin32Error () returned 0x3e5 [0125.736] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.736] CloseHandle (hObject=0x3d8) returned 1 [0125.738] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x1183b18 [0125.738] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\7nDtl1ODTnF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\7ndtl1odtnf.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\7nDtl1ODTnF.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\7ndtl1odtnf.png.1yg4ztc5")) returned 1 [0125.739] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0125.739] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b18) returned 1 [0125.739] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.739] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.746] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x6109, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.746] RtlGetLastWin32Error () returned 0x3e5 [0125.746] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.746] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x6109, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.747] RtlGetLastWin32Error () returned 0x3e5 [0125.747] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.747] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x6109, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.747] RtlGetLastWin32Error () returned 0x3e5 [0125.747] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.747] RtlGetLastWin32Error () returned 0x26 [0125.747] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.747] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.747] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.748] RtlGetLastWin32Error () returned 0x3e5 [0125.748] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.748] CloseHandle (hObject=0x3d8) returned 1 [0125.750] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x1183b78 [0125.750] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\Eum-G.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\eum-g.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\Eum-G.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\eum-g.png.1yg4ztc5")) returned 1 [0125.751] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b10) returned 1 [0125.751] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b78) returned 1 [0125.751] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.751] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.758] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x52bf, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.758] RtlGetLastWin32Error () returned 0x3e5 [0125.758] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.758] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x52bf, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.759] RtlGetLastWin32Error () returned 0x3e5 [0125.759] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.759] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x52bf, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.759] RtlGetLastWin32Error () returned 0x3e5 [0125.759] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.759] RtlGetLastWin32Error () returned 0x26 [0125.759] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.760] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.760] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.760] RtlGetLastWin32Error () returned 0x3e5 [0125.760] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.760] CloseHandle (hObject=0x3d8) returned 1 [0125.764] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183bf0 [0125.764] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pERp6q8YBvJUb0EB.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\perp6q8ybvjub0eb.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pERp6q8YBvJUb0EB.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\perp6q8ybvjub0eb.bmp.1yg4ztc5")) returned 1 [0125.765] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b78) returned 1 [0125.765] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf0) returned 1 [0125.765] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.765] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.787] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7612, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.788] RtlGetLastWin32Error () returned 0x3e5 [0125.788] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.788] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x7612, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.789] RtlGetLastWin32Error () returned 0x3e5 [0125.789] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.789] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7612, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.789] RtlGetLastWin32Error () returned 0x3e5 [0125.789] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.789] RtlGetLastWin32Error () returned 0x26 [0125.789] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.789] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.789] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.790] RtlGetLastWin32Error () returned 0x3e5 [0125.790] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.790] CloseHandle (hObject=0x3d8) returned 1 [0125.793] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183d38 [0125.793] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\ZJmAXf_iw1OZ22dUkz.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zjmaxf_iw1oz22dukz.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\ZJmAXf_iw1OZ22dUkz.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zjmaxf_iw1oz22dukz.bmp.1yg4ztc5")) returned 1 [0125.794] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.794] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d38) returned 1 [0125.794] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.794] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.808] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.808] RtlGetLastWin32Error () returned 0x3e5 [0125.808] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.808] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.808] RtlGetLastWin32Error () returned 0x3e5 [0125.808] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.808] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.809] RtlGetLastWin32Error () returned 0x3e5 [0125.809] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.809] RtlGetLastWin32Error () returned 0x26 [0125.809] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.809] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.809] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.809] RtlGetLastWin32Error () returned 0x3e5 [0125.809] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.809] CloseHandle (hObject=0x3d8) returned 1 [0125.815] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183d30 [0125.815] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Everywhere.search-ms.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\everywhere.search-ms.1yg4ztc5")) returned 1 [0125.816] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.816] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d30) returned 1 [0125.816] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.816] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.823] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.823] RtlGetLastWin32Error () returned 0x3e5 [0125.823] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.823] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.823] RtlGetLastWin32Error () returned 0x3e5 [0125.823] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.824] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0xf8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.824] RtlGetLastWin32Error () returned 0x3e5 [0125.824] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.824] RtlGetLastWin32Error () returned 0x26 [0125.824] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.824] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.824] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.824] RtlGetLastWin32Error () returned 0x3e5 [0125.824] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.824] CloseHandle (hObject=0x3d8) returned 1 [0125.830] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183d40 [0125.831] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\searches\\Indexed Locations.search-ms.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\indexed locations.search-ms.1yg4ztc5")) returned 1 [0125.832] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.832] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d40) returned 1 [0125.832] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.832] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.839] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.840] RtlGetLastWin32Error () returned 0x3e5 [0125.840] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.841] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToWrite=0x17b80, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.842] RtlGetLastWin32Error () returned 0x3e5 [0125.842] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.842] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17b80, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.843] RtlGetLastWin32Error () returned 0x3e5 [0125.843] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.843] RtlGetLastWin32Error () returned 0x26 [0125.843] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.843] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.843] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.843] RtlGetLastWin32Error () returned 0x3e5 [0125.843] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.843] CloseHandle (hObject=0x3d8) returned 1 [0125.849] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183d38 [0125.849] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\6i3pxIlMX__X8g3sdibs.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\6i3pxilmx__x8g3sdibs.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\6i3pxIlMX__X8g3sdibs.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\6i3pxilmx__x8g3sdibs.swf.1yg4ztc5")) returned 1 [0125.850] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183cb8) returned 1 [0125.850] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d38) returned 1 [0125.850] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.850] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.861] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x30b7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.861] RtlGetLastWin32Error () returned 0x3e5 [0125.861] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.862] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x30b7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.862] RtlGetLastWin32Error () returned 0x3e5 [0125.862] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.862] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x30b7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.863] RtlGetLastWin32Error () returned 0x3e5 [0125.863] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.863] RtlGetLastWin32Error () returned 0x26 [0125.863] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.863] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.863] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.863] RtlGetLastWin32Error () returned 0x3e5 [0125.863] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.864] CloseHandle (hObject=0x3d8) returned 1 [0125.869] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd6) returned 0x1183de8 [0125.869] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\eDmfBt.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\edmfbt.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\eDmfBt.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\edmfbt.swf.1yg4ztc5")) returned 1 [0125.870] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.870] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183de8) returned 1 [0125.870] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.870] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.874] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3bfb, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.876] RtlGetLastWin32Error () returned 0x3e5 [0125.876] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.876] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x3bfb, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.877] RtlGetLastWin32Error () returned 0x3e5 [0125.877] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.877] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3bfb, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.877] RtlGetLastWin32Error () returned 0x3e5 [0125.877] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.878] RtlGetLastWin32Error () returned 0x26 [0125.878] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.878] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.878] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.878] RtlGetLastWin32Error () returned 0x3e5 [0125.878] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.878] CloseHandle (hObject=0x3d8) returned 1 [0125.884] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183e08 [0125.884] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JdPv-THV6iu1IxNFOOGg.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jdpv-thv6iu1ixnfoogg.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JdPv-THV6iu1IxNFOOGg.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jdpv-thv6iu1ixnfoogg.swf.1yg4ztc5")) returned 1 [0125.885] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.885] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e08) returned 1 [0125.885] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.885] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.889] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4b07, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.889] RtlGetLastWin32Error () returned 0x3e5 [0125.889] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.889] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x4b07, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.890] RtlGetLastWin32Error () returned 0x3e5 [0125.890] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.890] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4b07, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.890] RtlGetLastWin32Error () returned 0x3e5 [0125.890] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.890] RtlGetLastWin32Error () returned 0x26 [0125.890] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.891] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.891] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.891] RtlGetLastWin32Error () returned 0x3e5 [0125.891] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.891] CloseHandle (hObject=0x3d8) returned 1 [0125.893] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183e08 [0125.893] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JW1N_M9MWCDNminC7_Tm.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jw1n_m9mwcdnminc7_tm.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\JW1N_M9MWCDNminC7_Tm.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\jw1n_m9mwcdnminc7_tm.flv.1yg4ztc5")) returned 1 [0125.894] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.894] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e08) returned 1 [0125.894] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.894] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.898] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15f40, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.899] RtlGetLastWin32Error () returned 0x3e5 [0125.899] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.900] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x15f40, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.901] RtlGetLastWin32Error () returned 0x3e5 [0125.901] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.901] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15f40, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.902] RtlGetLastWin32Error () returned 0x3e5 [0125.902] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.902] RtlGetLastWin32Error () returned 0x26 [0125.902] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.902] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.902] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.902] RtlGetLastWin32Error () returned 0x3e5 [0125.903] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.903] CloseHandle (hObject=0x3d8) returned 1 [0125.906] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x1183df0 [0125.907] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\LOcjMbS.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\locjmbs.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\LOcjMbS.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\locjmbs.mp4.1yg4ztc5")) returned 1 [0125.907] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.907] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df0) returned 1 [0125.908] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.908] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.911] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x133f0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.911] RtlGetLastWin32Error () returned 0x3e5 [0125.911] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.912] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x133f0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.914] RtlGetLastWin32Error () returned 0x3e5 [0125.914] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.914] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x133f0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.914] RtlGetLastWin32Error () returned 0x3e5 [0125.914] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.914] RtlGetLastWin32Error () returned 0x26 [0125.914] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.914] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.914] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.915] RtlGetLastWin32Error () returned 0x3e5 [0125.915] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.915] CloseHandle (hObject=0x3d8) returned 1 [0125.917] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x1183e08 [0125.918] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\Ps_Y7GMrUuhLbnrspS9.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ps_y7gmruuhlbnrsps9.mkv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\Ps_Y7GMrUuhLbnrspS9.mkv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ps_y7gmruuhlbnrsps9.mkv.1yg4ztc5")) returned 1 [0125.919] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.919] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e08) returned 1 [0125.919] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.919] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.923] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9499, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.923] RtlGetLastWin32Error () returned 0x3e5 [0125.923] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.924] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x9499, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.925] RtlGetLastWin32Error () returned 0x3e5 [0125.925] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.925] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9499, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.925] RtlGetLastWin32Error () returned 0x3e5 [0125.925] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.925] RtlGetLastWin32Error () returned 0x26 [0125.925] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.925] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.925] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.926] RtlGetLastWin32Error () returned 0x3e5 [0125.926] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.926] CloseHandle (hObject=0x3d8) returned 1 [0125.928] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd2) returned 0x1183de8 [0125.929] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\rOuI.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\roui.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\rOuI.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\roui.mp4.1yg4ztc5")) returned 1 [0125.930] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.930] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183de8) returned 1 [0125.930] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.930] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.935] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x61c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.935] RtlGetLastWin32Error () returned 0x3e5 [0125.935] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.935] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToWrite=0x61c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.935] RtlGetLastWin32Error () returned 0x3e5 [0125.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.936] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x61c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.936] RtlGetLastWin32Error () returned 0x3e5 [0125.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0125.936] RtlGetLastWin32Error () returned 0x26 [0125.936] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.936] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.936] RtlGetLastWin32Error () returned 0x3e5 [0125.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0125.937] CloseHandle (hObject=0x3d8) returned 1 [0125.938] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x1183df8 [0125.938] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\r_thM75ifbQ0QX.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\r_thm75ifbq0qx.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\r_thM75ifbQ0QX.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\r_thm75ifbq0qx.flv.1yg4ztc5")) returned 1 [0125.939] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0125.940] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df8) returned 1 [0125.940] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.940] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.017] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x956, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.017] RtlGetLastWin32Error () returned 0x3e5 [0126.017] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.017] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x956, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.018] RtlGetLastWin32Error () returned 0x3e5 [0126.018] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.018] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x956, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.018] RtlGetLastWin32Error () returned 0x3e5 [0126.018] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.018] RtlGetLastWin32Error () returned 0x26 [0126.018] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.018] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.018] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.019] RtlGetLastWin32Error () returned 0x3e5 [0126.019] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.019] CloseHandle (hObject=0x3d8) returned 1 [0126.021] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe0) returned 0x1183df8 [0126.021] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\SEYiJHv2SpL.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\seyijhv2spl.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\SEYiJHv2SpL.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\seyijhv2spl.swf.1yg4ztc5")) returned 1 [0126.022] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.022] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df8) returned 1 [0126.022] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.022] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.026] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2438, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.026] RtlGetLastWin32Error () returned 0x3e5 [0126.026] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.026] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2438, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.027] RtlGetLastWin32Error () returned 0x3e5 [0126.027] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.027] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2438, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.027] RtlGetLastWin32Error () returned 0x3e5 [0126.027] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.027] RtlGetLastWin32Error () returned 0x26 [0126.027] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.027] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.027] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.028] RtlGetLastWin32Error () returned 0x3e5 [0126.028] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.028] CloseHandle (hObject=0x3d8) returned 1 [0126.032] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183e00 [0126.032] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\URGZlfZLPhup7rRJYz.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\urgzlfzlphup7rrjyz.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\URGZlfZLPhup7rRJYz.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\urgzlfzlphup7rrjyz.avi.1yg4ztc5")) returned 1 [0126.033] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.033] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.033] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.033] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.038] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15b37, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.039] RtlGetLastWin32Error () returned 0x3e5 [0126.039] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.040] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x15b37, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.041] RtlGetLastWin32Error () returned 0x3e5 [0126.041] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.041] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15b37, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.042] RtlGetLastWin32Error () returned 0x3e5 [0126.042] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.042] RtlGetLastWin32Error () returned 0x26 [0126.042] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.042] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.042] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.042] RtlGetLastWin32Error () returned 0x3e5 [0126.042] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.042] CloseHandle (hObject=0x3d8) returned 1 [0126.049] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe2) returned 0x1183df8 [0126.049] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\wJiV5gVOmgxd.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wjiv5gvomgxd.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\wJiV5gVOmgxd.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wjiv5gvomgxd.avi.1yg4ztc5")) returned 1 [0126.050] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.050] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183df8) returned 1 [0126.050] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.050] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.054] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x100d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.054] RtlGetLastWin32Error () returned 0x3e5 [0126.054] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.054] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x100d, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.059] RtlGetLastWin32Error () returned 0x3e5 [0126.059] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.059] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x100d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.059] RtlGetLastWin32Error () returned 0x3e5 [0126.059] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.059] RtlGetLastWin32Error () returned 0x26 [0126.060] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.060] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.060] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.060] RtlGetLastWin32Error () returned 0x3e5 [0126.060] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.060] CloseHandle (hObject=0x3d8) returned 1 [0126.064] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe8) returned 0x1183e00 [0126.064] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\xamTr_oYu_mgpHD.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\xamtr_oyu_mgphd.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\xamTr_oYu_mgpHD.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\xamtr_oyu_mgphd.swf.1yg4ztc5")) returned 1 [0126.065] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.065] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.065] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.066] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.072] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x14c1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.072] RtlGetLastWin32Error () returned 0x3e5 [0126.072] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.072] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x14c1, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.073] RtlGetLastWin32Error () returned 0x3e5 [0126.073] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.073] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x14c1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.073] RtlGetLastWin32Error () returned 0x3e5 [0126.073] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.073] RtlGetLastWin32Error () returned 0x26 [0126.073] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.073] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.073] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.074] RtlGetLastWin32Error () returned 0x3e5 [0126.074] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.074] CloseHandle (hObject=0x3d8) returned 1 [0126.075] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183e10 [0126.075] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umSa-sI5gifEmW.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umsa-si5gifemw.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umSa-sI5gifEmW.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\-umsa-si5gifemw.swf.1yg4ztc5")) returned 1 [0126.076] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183d88) returned 1 [0126.076] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e10) returned 1 [0126.076] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.076] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.083] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5ba0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.083] RtlGetLastWin32Error () returned 0x3e5 [0126.083] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.084] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x5ba0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.084] RtlGetLastWin32Error () returned 0x3e5 [0126.084] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.085] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5ba0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.085] RtlGetLastWin32Error () returned 0x3e5 [0126.085] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.085] RtlGetLastWin32Error () returned 0x26 [0126.085] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.085] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.085] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.086] RtlGetLastWin32Error () returned 0x3e5 [0126.086] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.086] CloseHandle (hObject=0x3d8) returned 1 [0126.093] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf4) returned 0x1183e80 [0126.093] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tCX_RN2xF9X.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tcx_rn2xf9x.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tCX_RN2xF9X.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\tcx_rn2xf9x.png.1yg4ztc5")) returned 1 [0126.094] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.094] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e80) returned 1 [0126.094] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.094] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.098] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14c50, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.099] RtlGetLastWin32Error () returned 0x3e5 [0126.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.099] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14c50, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.101] RtlGetLastWin32Error () returned 0x3e5 [0126.101] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.101] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14c50, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.101] RtlGetLastWin32Error () returned 0x3e5 [0126.101] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.101] RtlGetLastWin32Error () returned 0x26 [0126.101] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.102] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.102] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.102] RtlGetLastWin32Error () returned 0x3e5 [0126.102] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.102] CloseHandle (hObject=0x3d8) returned 1 [0126.106] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf6) returned 0x1183e80 [0126.106] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulYmM-fmul26.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulymm-fmul26.pps"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulYmM-fmul26.pps.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ulymm-fmul26.pps.1yg4ztc5")) returned 1 [0126.107] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.107] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e80) returned 1 [0126.107] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.107] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.111] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe964, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.111] RtlGetLastWin32Error () returned 0x3e5 [0126.111] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.112] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xe964, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.113] RtlGetLastWin32Error () returned 0x3e5 [0126.113] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.113] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe964, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.113] RtlGetLastWin32Error () returned 0x3e5 [0126.113] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.114] RtlGetLastWin32Error () returned 0x26 [0126.114] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.114] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.114] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.114] RtlGetLastWin32Error () returned 0x3e5 [0126.114] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.114] CloseHandle (hObject=0x3d8) returned 1 [0126.117] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183e88 [0126.117] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\Vi3giADhSuv oRP.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\vi3giadhsuv orp.pps"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\Vi3giADhSuv oRP.pps.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\vi3giadhsuv orp.pps.1yg4ztc5")) returned 1 [0126.118] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.119] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e88) returned 1 [0126.119] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.119] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.123] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1810e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.124] RtlGetLastWin32Error () returned 0x3e5 [0126.124] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.125] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1810e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.126] RtlGetLastWin32Error () returned 0x3e5 [0126.126] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.126] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1810e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.126] RtlGetLastWin32Error () returned 0x3e5 [0126.127] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.127] RtlGetLastWin32Error () returned 0x26 [0126.127] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.127] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.127] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.127] RtlGetLastWin32Error () returned 0x3e5 [0126.127] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.127] CloseHandle (hObject=0x3d8) returned 1 [0126.132] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x1183e70 [0126.133] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cY.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cy.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cY.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\z0cy.flv.1yg4ztc5")) returned 1 [0126.135] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.135] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e70) returned 1 [0126.135] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.135] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.145] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbf74, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.146] RtlGetLastWin32Error () returned 0x3e5 [0126.146] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.146] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xbf74, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.148] RtlGetLastWin32Error () returned 0x3e5 [0126.148] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.148] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbf74, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.148] RtlGetLastWin32Error () returned 0x3e5 [0126.148] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.148] RtlGetLastWin32Error () returned 0x26 [0126.148] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.148] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.148] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.149] RtlGetLastWin32Error () returned 0x3e5 [0126.149] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.149] CloseHandle (hObject=0x3d8) returned 1 [0126.151] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf4) returned 0x1183e00 [0126.151] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5H4kyoh3O.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5h4kyoh3o.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5H4kyoh3O.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\5h4kyoh3o.mp3.1yg4ztc5")) returned 1 [0126.153] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.153] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.153] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.153] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.156] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18349, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.157] RtlGetLastWin32Error () returned 0x3e5 [0126.157] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.158] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x18349, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.160] RtlGetLastWin32Error () returned 0x3e5 [0126.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.160] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18349, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.160] RtlGetLastWin32Error () returned 0x3e5 [0126.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.160] RtlGetLastWin32Error () returned 0x26 [0126.160] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.160] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.161] RtlGetLastWin32Error () returned 0x3e5 [0126.161] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.161] CloseHandle (hObject=0x3d8) returned 1 [0126.164] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183e88 [0126.165] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\cRCLA-_5U24a-.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\crcla-_5u24a-.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\cRCLA-_5U24a-.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\crcla-_5u24a-.flv.1yg4ztc5")) returned 1 [0126.166] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.166] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e88) returned 1 [0126.166] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.166] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.169] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1e0e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.170] RtlGetLastWin32Error () returned 0x3e5 [0126.170] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.170] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToWrite=0x1e0e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.170] RtlGetLastWin32Error () returned 0x3e5 [0126.170] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.171] ReadFile (in: hFile=0x3d8, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1e0e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.171] RtlGetLastWin32Error () returned 0x3e5 [0126.171] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.171] RtlGetLastWin32Error () returned 0x26 [0126.171] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.171] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.171] WriteFile (in: hFile=0x3d8, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.171] RtlGetLastWin32Error () returned 0x3e5 [0126.171] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.171] CloseHandle (hObject=0x3d8) returned 1 [0126.173] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183e00 [0126.173] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1Vdv.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1vdv.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1Vdv.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\w1vdv.m4a.1yg4ztc5")) returned 1 [0126.174] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.174] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0126.174] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.174] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.187] ReadFile (in: hFile=0x3d8, lpBuffer=0x3aca5fc, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x0, lpOverlapped=0x3aca4a0 | out: lpBuffer=0x3aca5fc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3aca4a0) returned 1 [0126.188] RtlGetLastWin32Error () returned 0x3e5 [0126.188] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.194] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x93b0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.195] RtlGetLastWin32Error () returned 0x3e5 [0126.195] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.195] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x93b0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.196] RtlGetLastWin32Error () returned 0x3e5 [0126.196] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.196] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x93b0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.196] RtlGetLastWin32Error () returned 0x3e5 [0126.196] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.196] RtlGetLastWin32Error () returned 0x26 [0126.196] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.196] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.196] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.197] RtlGetLastWin32Error () returned 0x3e5 [0126.197] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.197] CloseHandle (hObject=0x3d0) returned 1 [0126.199] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x104) returned 0x1183e98 [0126.199] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\H8NI-Y-.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\h8ni-y-.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\H8NI-Y-.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\h8ni-y-.docx.1yg4ztc5")) returned 1 [0126.200] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0126.200] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.200] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.200] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.215] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2a48, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.215] RtlGetLastWin32Error () returned 0x3e5 [0126.215] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.215] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2a48, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.216] RtlGetLastWin32Error () returned 0x3e5 [0126.216] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.216] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2a48, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.216] RtlGetLastWin32Error () returned 0x3e5 [0126.216] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.216] RtlGetLastWin32Error () returned 0x26 [0126.216] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.216] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.216] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.217] RtlGetLastWin32Error () returned 0x3e5 [0126.217] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.217] CloseHandle (hObject=0x3d0) returned 1 [0126.218] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183e98 [0126.218] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjTYqk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjtyqk.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjTYqk.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\-hjtyqk.mp3.1yg4ztc5")) returned 1 [0126.220] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.220] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.220] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.220] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.223] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x173e2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.224] RtlGetLastWin32Error () returned 0x3e5 [0126.224] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.225] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x173e2, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.226] RtlGetLastWin32Error () returned 0x3e5 [0126.226] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.226] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x173e2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.227] RtlGetLastWin32Error () returned 0x3e5 [0126.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.227] RtlGetLastWin32Error () returned 0x26 [0126.227] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.227] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.227] RtlGetLastWin32Error () returned 0x3e5 [0126.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.228] CloseHandle (hObject=0x3d0) returned 1 [0126.231] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183e98 [0126.231] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8PzcWGW.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8pzcwgw.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8PzcWGW.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\8pzcwgw.m4a.1yg4ztc5")) returned 1 [0126.232] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.232] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.232] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.234] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.242] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb95b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.242] RtlGetLastWin32Error () returned 0x3e5 [0126.242] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.243] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb95b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.244] RtlGetLastWin32Error () returned 0x3e5 [0126.244] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.244] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb95b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.244] RtlGetLastWin32Error () returned 0x3e5 [0126.244] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.244] RtlGetLastWin32Error () returned 0x26 [0126.244] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.244] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.244] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.245] RtlGetLastWin32Error () returned 0x3e5 [0126.245] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.245] CloseHandle (hObject=0x3d0) returned 1 [0126.248] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x104) returned 0x1183e98 [0126.248] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\BX1wR y6hvbH4sIC-7v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\bx1wr y6hvbh4sic-7v.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\BX1wR y6hvbH4sIC-7v.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\bx1wr y6hvbh4sic-7v.mp3.1yg4ztc5")) returned 1 [0126.249] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.249] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.250] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.250] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.256] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x181e0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.257] RtlGetLastWin32Error () returned 0x3e5 [0126.257] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.258] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x181e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.259] RtlGetLastWin32Error () returned 0x3e5 [0126.259] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.259] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x181e0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.260] RtlGetLastWin32Error () returned 0x3e5 [0126.260] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.260] RtlGetLastWin32Error () returned 0x26 [0126.260] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.260] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.260] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.260] RtlGetLastWin32Error () returned 0x3e5 [0126.260] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.260] CloseHandle (hObject=0x3d0) returned 1 [0126.264] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x100) returned 0x1183e98 [0126.264] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\F27AcbA_RY_-woTi6.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\f27acba_ry_-woti6.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\F27AcbA_RY_-woTi6.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\f27acba_ry_-woti6.mp3.1yg4ztc5")) returned 1 [0126.265] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.265] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.265] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.266] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.271] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.271] RtlGetLastWin32Error () returned 0x3e5 [0126.271] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.271] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1939, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.272] RtlGetLastWin32Error () returned 0x3e5 [0126.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.272] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1939, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.272] RtlGetLastWin32Error () returned 0x3e5 [0126.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.272] RtlGetLastWin32Error () returned 0x26 [0126.272] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.273] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.273] RtlGetLastWin32Error () returned 0x3e5 [0126.273] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.273] CloseHandle (hObject=0x3d0) returned 1 [0126.274] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183e98 [0126.274] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\GA5oxL-.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ga5oxl-.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\GA5oxL-.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ga5oxl-.m4a.1yg4ztc5")) returned 1 [0126.275] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.275] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.275] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.275] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.280] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14624, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.281] RtlGetLastWin32Error () returned 0x3e5 [0126.281] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.281] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14624, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.283] RtlGetLastWin32Error () returned 0x3e5 [0126.283] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.283] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14624, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.283] RtlGetLastWin32Error () returned 0x3e5 [0126.283] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.283] RtlGetLastWin32Error () returned 0x26 [0126.283] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.284] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.284] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.284] RtlGetLastWin32Error () returned 0x3e5 [0126.284] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.284] CloseHandle (hObject=0x3d0) returned 1 [0126.287] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183e98 [0126.287] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tG.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tg.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tG.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gdr194tg.m4a.1yg4ztc5")) returned 1 [0126.295] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.295] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.295] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.295] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.923] ReadFile (in: hFile=0x3d0, lpBuffer=0x3b0cb64, nNumberOfBytesToRead=0xbda5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.924] RtlGetLastWin32Error () returned 0x3e5 [0126.924] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.927] WriteFile (in: hFile=0x3d0, lpBuffer=0x3b0cb64*, nNumberOfBytesToWrite=0xbda5, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.927] RtlGetLastWin32Error () returned 0x3e5 [0126.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.928] ReadFile (in: hFile=0x3d0, lpBuffer=0x3b0cb64, nNumberOfBytesToRead=0xbda5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08) returned 0x0 [0126.928] RtlGetLastWin32Error () returned 0x3e5 [0126.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0126.928] RtlGetLastWin32Error () returned 0x26 [0126.928] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.928] WriteFile (in: hFile=0x3d0, lpBuffer=0x3b0ca30*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0ca30*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.929] RtlGetLastWin32Error () returned 0x3e5 [0126.929] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.929] CloseHandle (hObject=0x3d0) returned 1 [0126.932] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183a10 [0126.933] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_Kv.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_kv.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_Kv.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\yn_kv.jpg.1yg4ztc5")) returned 1 [0126.934] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ba0) returned 1 [0126.934] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.934] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3b0ca08) returned 1 [0126.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.996] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18b88, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.997] RtlGetLastWin32Error () returned 0x3e5 [0126.997] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0126.998] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x18b88, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.000] RtlGetLastWin32Error () returned 0x3e5 [0127.000] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.000] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18b88, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.001] RtlGetLastWin32Error () returned 0x3e5 [0127.001] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.001] RtlGetLastWin32Error () returned 0x26 [0127.001] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.001] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.001] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.001] RtlGetLastWin32Error () returned 0x3e5 [0127.001] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.001] CloseHandle (hObject=0x3d0) returned 1 [0127.008] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x108) returned 0x1183a10 [0127.008] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\oNZyM1CpX6Slc7.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\onzym1cpx6slc7.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\oNZyM1CpX6Slc7.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\onzym1cpx6slc7.swf.1yg4ztc5")) returned 1 [0127.010] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.010] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.010] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.011] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.017] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd9ea, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.018] RtlGetLastWin32Error () returned 0x3e5 [0127.018] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.018] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xd9ea, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.019] RtlGetLastWin32Error () returned 0x3e5 [0127.020] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.020] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd9ea, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.020] RtlGetLastWin32Error () returned 0x3e5 [0127.020] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.020] RtlGetLastWin32Error () returned 0x26 [0127.020] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.020] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.020] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.021] RtlGetLastWin32Error () returned 0x3e5 [0127.021] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.021] CloseHandle (hObject=0x3d0) returned 1 [0127.026] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x106) returned 0x1183a10 [0127.026] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\QeFAs5IS6bvA.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\qefas5is6bva.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\QeFAs5IS6bvA.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\qefas5is6bva.pptx.1yg4ztc5")) returned 1 [0127.027] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.027] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.027] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.028] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.033] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc62b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.033] RtlGetLastWin32Error () returned 0x3e5 [0127.033] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.034] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc62b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.035] RtlGetLastWin32Error () returned 0x3e5 [0127.035] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.035] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc62b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.035] RtlGetLastWin32Error () returned 0x3e5 [0127.035] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.035] RtlGetLastWin32Error () returned 0x26 [0127.035] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.035] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.035] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.036] RtlGetLastWin32Error () returned 0x3e5 [0127.036] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.036] CloseHandle (hObject=0x3d0) returned 1 [0127.044] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfe) returned 0x1183a10 [0127.044] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\znTgWd9fa.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\zntgwd9fa.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\znTgWd9fa.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\pfzhoo0zmp\\1ouv\\zntgwd9fa.bmp.1yg4ztc5")) returned 1 [0127.045] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.045] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0127.045] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.046] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.094] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd722, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.094] RtlGetLastWin32Error () returned 0x3e5 [0127.094] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.095] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xd722, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.098] RtlGetLastWin32Error () returned 0x3e5 [0127.098] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.098] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd722, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.098] RtlGetLastWin32Error () returned 0x3e5 [0127.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.099] RtlGetLastWin32Error () returned 0x26 [0127.099] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.099] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.099] RtlGetLastWin32Error () returned 0x3e5 [0127.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.100] CloseHandle (hObject=0x3d0) returned 1 [0127.107] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11e) returned 0x1183b58 [0127.108] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29TUnR2mS8et2.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29tunr2ms8et2.odt"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29TUnR2mS8et2.odt.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\j29tunr2ms8et2.odt.1yg4ztc5")) returned 1 [0127.109] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0127.109] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.109] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.110] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.126] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc523, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.126] RtlGetLastWin32Error () returned 0x3e5 [0127.126] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.127] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc523, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.128] RtlGetLastWin32Error () returned 0x3e5 [0127.128] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.128] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc523, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.128] RtlGetLastWin32Error () returned 0x3e5 [0127.128] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.128] RtlGetLastWin32Error () returned 0x26 [0127.128] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.128] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.128] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.128] RtlGetLastWin32Error () returned 0x3e5 [0127.128] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.128] CloseHandle (hObject=0x3d0) returned 1 [0127.133] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183c00 [0127.134] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uVOjn2_x74I.ods" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uvojn2_x74i.ods"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uVOjn2_x74I.ods.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\uvojn2_x74i.ods.1yg4ztc5")) returned 1 [0127.135] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.135] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c00) returned 1 [0127.136] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.137] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.142] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4cdd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.143] RtlGetLastWin32Error () returned 0x3e5 [0127.143] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.143] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x4cdd, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.144] RtlGetLastWin32Error () returned 0x3e5 [0127.144] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.144] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4cdd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.144] RtlGetLastWin32Error () returned 0x3e5 [0127.144] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.144] RtlGetLastWin32Error () returned 0x26 [0127.144] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.144] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.144] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.145] RtlGetLastWin32Error () returned 0x3e5 [0127.145] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.145] CloseHandle (hObject=0x3d0) returned 1 [0127.148] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11e) returned 0x1183c00 [0127.148] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\Z64YPMlvlic7O9.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\z64ypmlvlic7o9.doc"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\Z64YPMlvlic7O9.doc.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\z64ypmlvlic7o9.doc.1yg4ztc5")) returned 1 [0127.154] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.154] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c00) returned 1 [0127.154] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.154] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.159] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb54e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.159] RtlGetLastWin32Error () returned 0x3e5 [0127.159] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.159] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb54e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.160] RtlGetLastWin32Error () returned 0x3e5 [0127.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.161] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb54e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.161] RtlGetLastWin32Error () returned 0x3e5 [0127.161] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.161] RtlGetLastWin32Error () returned 0x26 [0127.161] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.161] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.161] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.162] RtlGetLastWin32Error () returned 0x3e5 [0127.162] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.162] CloseHandle (hObject=0x3d0) returned 1 [0127.176] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x128) returned 0x1183c10 [0127.176] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\ZADUpwgiJ8uOonMiE8a.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\zadupwgij8uoonmie8a.csv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\ZADUpwgiJ8uOonMiE8a.csv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\zadupwgij8uoonmie8a.csv.1yg4ztc5")) returned 1 [0127.177] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.177] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c10) returned 1 [0127.177] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.178] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.184] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17d54, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.185] RtlGetLastWin32Error () returned 0x3e5 [0127.185] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.186] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x17d54, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.188] RtlGetLastWin32Error () returned 0x3e5 [0127.188] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.188] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17d54, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.188] RtlGetLastWin32Error () returned 0x3e5 [0127.188] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.188] RtlGetLastWin32Error () returned 0x26 [0127.188] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.188] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.188] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.190] RtlGetLastWin32Error () returned 0x3e5 [0127.190] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.190] CloseHandle (hObject=0x3d0) returned 1 [0127.193] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x126) returned 0x1183c08 [0127.193] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yfFnDibGrsmCVUoSQ.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yffndibgrsmcvuosq.pdf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yfFnDibGrsmCVUoSQ.pdf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\_yffndibgrsmcvuosq.pdf.1yg4ztc5")) returned 1 [0127.194] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.194] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c08) returned 1 [0127.194] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.195] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.205] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x76a4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.205] RtlGetLastWin32Error () returned 0x3e5 [0127.206] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.206] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x76a4, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.207] RtlGetLastWin32Error () returned 0x3e5 [0127.207] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.207] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x76a4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.207] RtlGetLastWin32Error () returned 0x3e5 [0127.207] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.207] RtlGetLastWin32Error () returned 0x26 [0127.207] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.207] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.207] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.208] RtlGetLastWin32Error () returned 0x3e5 [0127.208] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.208] CloseHandle (hObject=0x3d0) returned 1 [0127.211] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x112) returned 0x1183bf8 [0127.211] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-IxCwY_jBOe.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-ixcwy_jboe.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-IxCwY_jBOe.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\-ixcwy_jboe.jpg.1yg4ztc5")) returned 1 [0127.212] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.212] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183bf8) returned 1 [0127.212] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.212] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.217] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x156ec, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.218] RtlGetLastWin32Error () returned 0x3e5 [0127.218] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.219] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x156ec, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.221] RtlGetLastWin32Error () returned 0x3e5 [0127.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.221] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x156ec, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.221] RtlGetLastWin32Error () returned 0x3e5 [0127.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.221] RtlGetLastWin32Error () returned 0x26 [0127.221] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.221] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.222] RtlGetLastWin32Error () returned 0x3e5 [0127.222] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.222] CloseHandle (hObject=0x3d0) returned 1 [0127.229] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x124) returned 0x1183c08 [0127.229] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79OkAP5ZR13BLE2cbVKN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79okap5zr13ble2cbvkn.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79OkAP5ZR13BLE2cbVKN.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\79okap5zr13ble2cbvkn.png.1yg4ztc5")) returned 1 [0127.231] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.231] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c08) returned 1 [0127.231] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.232] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.239] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17a9b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.240] RtlGetLastWin32Error () returned 0x3e5 [0127.240] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.240] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x17a9b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.242] RtlGetLastWin32Error () returned 0x3e5 [0127.242] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.242] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17a9b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.243] RtlGetLastWin32Error () returned 0x3e5 [0127.243] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.243] RtlGetLastWin32Error () returned 0x26 [0127.243] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.243] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.243] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.243] RtlGetLastWin32Error () returned 0x3e5 [0127.244] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.244] CloseHandle (hObject=0x3d0) returned 1 [0127.249] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183c00 [0127.249] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eOTpS93JYGpfx7.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eotps93jygpfx7.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eOTpS93JYGpfx7.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\eotps93jygpfx7.bmp.1yg4ztc5")) returned 1 [0127.251] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.251] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c00) returned 1 [0127.251] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.252] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.258] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10a2f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.259] RtlGetLastWin32Error () returned 0x3e5 [0127.259] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.260] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10a2f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.261] RtlGetLastWin32Error () returned 0x3e5 [0127.261] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.261] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10a2f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.261] RtlGetLastWin32Error () returned 0x3e5 [0127.261] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.261] RtlGetLastWin32Error () returned 0x26 [0127.261] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.261] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.261] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.262] RtlGetLastWin32Error () returned 0x3e5 [0127.262] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.262] CloseHandle (hObject=0x3d0) returned 1 [0127.265] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183c00 [0127.266] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\J-r8reKWUlmUpF.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\j-r8rekwulmupf.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\J-r8reKWUlmUpF.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\4ybkstu5b2\\j-r8rekwulmupf.png.1yg4ztc5")) returned 1 [0127.267] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.267] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183c00) returned 1 [0127.267] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.268] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.279] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2dc9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.279] RtlGetLastWin32Error () returned 0x3e5 [0127.279] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.279] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2dc9, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.280] RtlGetLastWin32Error () returned 0x3e5 [0127.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.280] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2dc9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.280] RtlGetLastWin32Error () returned 0x3e5 [0127.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.280] RtlGetLastWin32Error () returned 0x26 [0127.280] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.280] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.281] RtlGetLastWin32Error () returned 0x3e5 [0127.281] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.281] CloseHandle (hObject=0x3d0) returned 1 [0127.285] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12e) returned 0x1183b58 [0127.285] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7Tjz8aRj951.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7tjz8arj951.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7Tjz8aRj951.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\2yng1u7tjz8arj951.gif.1yg4ztc5")) returned 1 [0127.287] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.287] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.287] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.287] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.292] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc49d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.292] RtlGetLastWin32Error () returned 0x3e5 [0127.293] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.293] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc49d, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.294] RtlGetLastWin32Error () returned 0x3e5 [0127.294] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.294] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc49d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.294] RtlGetLastWin32Error () returned 0x3e5 [0127.294] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.294] RtlGetLastWin32Error () returned 0x26 [0127.294] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.294] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.294] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.295] RtlGetLastWin32Error () returned 0x3e5 [0127.295] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.295] CloseHandle (hObject=0x3d0) returned 1 [0127.301] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183b58 [0127.302] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\efvlcb.jpg.1yg4ztc5")) returned 1 [0127.303] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.303] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.303] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.304] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.310] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x995c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.310] RtlGetLastWin32Error () returned 0x3e5 [0127.310] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.311] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x995c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.312] RtlGetLastWin32Error () returned 0x3e5 [0127.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.312] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x995c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.312] RtlGetLastWin32Error () returned 0x3e5 [0127.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.312] RtlGetLastWin32Error () returned 0x26 [0127.312] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.313] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.313] RtlGetLastWin32Error () returned 0x3e5 [0127.313] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.313] CloseHandle (hObject=0x3d0) returned 1 [0127.315] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11a) returned 0x1183b58 [0127.315] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\W1r66c1.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\w1r66c1.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\W1r66c1.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\w1r66c1.png.1yg4ztc5")) returned 1 [0127.316] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.316] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.316] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.321] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12de3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.322] RtlGetLastWin32Error () returned 0x3e5 [0127.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.323] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x12de3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.324] RtlGetLastWin32Error () returned 0x3e5 [0127.324] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.324] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12de3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.324] RtlGetLastWin32Error () returned 0x3e5 [0127.325] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.325] RtlGetLastWin32Error () returned 0x26 [0127.325] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.325] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.325] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.325] RtlGetLastWin32Error () returned 0x3e5 [0127.325] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.325] CloseHandle (hObject=0x3d0) returned 1 [0127.328] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x128) returned 0x1183b58 [0127.329] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\YnSvajqMQ 0jEc.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\ynsvajqmq 0jec.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\YnSvajqMQ 0jEc.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\tffvxsh5nlxsrc89wn\\ynsvajqmq 0jec.jpg.1yg4ztc5")) returned 1 [0127.330] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.330] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.330] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.331] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.348] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12f5b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.349] RtlGetLastWin32Error () returned 0x3e5 [0127.349] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.350] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x12f5b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.351] RtlGetLastWin32Error () returned 0x3e5 [0127.351] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.351] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12f5b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.351] RtlGetLastWin32Error () returned 0x3e5 [0127.351] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.351] RtlGetLastWin32Error () returned 0x26 [0127.351] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.351] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.351] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.352] RtlGetLastWin32Error () returned 0x3e5 [0127.352] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.352] CloseHandle (hObject=0x3d0) returned 1 [0127.356] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x122) returned 0x1183b58 [0127.356] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqKKxCSpyRDA-dh.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqkkxcspyrda-dh.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqKKxCSpyRDA-dh.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\82gqqkkxcspyrda-dh.png.1yg4ztc5")) returned 1 [0127.357] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.357] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.357] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.358] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.363] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x135c1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.364] RtlGetLastWin32Error () returned 0x3e5 [0127.364] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.365] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x135c1, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.366] RtlGetLastWin32Error () returned 0x3e5 [0127.366] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.366] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x135c1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.366] RtlGetLastWin32Error () returned 0x3e5 [0127.366] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.367] RtlGetLastWin32Error () returned 0x26 [0127.367] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.367] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.367] RtlGetLastWin32Error () returned 0x3e5 [0127.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.367] CloseHandle (hObject=0x3d0) returned 1 [0127.373] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x120) returned 0x1183b58 [0127.373] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\Hvyz1pzHYb5z-nka9.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\hvyz1pzhyb5z-nka9.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\Hvyz1pzHYb5z-nka9.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\hvyz1pzhyb5z-nka9.png.1yg4ztc5")) returned 1 [0127.374] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.374] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.375] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.376] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.382] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18227, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.383] RtlGetLastWin32Error () returned 0x3e5 [0127.383] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.384] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x18227, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.386] RtlGetLastWin32Error () returned 0x3e5 [0127.386] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.386] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18227, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.387] RtlGetLastWin32Error () returned 0x3e5 [0127.387] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.387] RtlGetLastWin32Error () returned 0x26 [0127.387] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.387] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.387] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.388] RtlGetLastWin32Error () returned 0x3e5 [0127.388] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.388] CloseHandle (hObject=0x3d0) returned 1 [0127.392] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x122) returned 0x1183b58 [0127.393] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\IrhHoexA1Qos95YfSf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\irhhoexa1qos95yfsf.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\IrhHoexA1Qos95YfSf.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\irhhoexa1qos95yfsf.jpg.1yg4ztc5")) returned 1 [0127.394] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.394] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.394] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.395] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.402] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2e1f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.402] RtlGetLastWin32Error () returned 0x3e5 [0127.402] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.402] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2e1f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.403] RtlGetLastWin32Error () returned 0x3e5 [0127.403] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.403] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2e1f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.404] RtlGetLastWin32Error () returned 0x3e5 [0127.404] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.404] RtlGetLastWin32Error () returned 0x26 [0127.404] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.404] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.404] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.404] RtlGetLastWin32Error () returned 0x3e5 [0127.404] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.404] CloseHandle (hObject=0x3d0) returned 1 [0127.409] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x116) returned 0x1183b58 [0127.409] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2V0tpe8CZ6V.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2v0tpe8cz6v.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2V0tpe8CZ6V.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\l2v0tpe8cz6v.png.1yg4ztc5")) returned 1 [0127.410] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.411] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.411] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.411] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.415] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1b38, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.415] RtlGetLastWin32Error () returned 0x3e5 [0127.415] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.415] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1b38, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.415] RtlGetLastWin32Error () returned 0x3e5 [0127.416] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.416] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1b38, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.416] RtlGetLastWin32Error () returned 0x3e5 [0127.416] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.416] RtlGetLastWin32Error () returned 0x26 [0127.416] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.416] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.416] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.416] RtlGetLastWin32Error () returned 0x3e5 [0127.416] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.416] CloseHandle (hObject=0x3d0) returned 1 [0127.420] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x10a) returned 0x1183b58 [0127.421] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\uNqNOm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\unqnom.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\uNqNOm.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\7b9cau6t30ew\\unqnom.png.1yg4ztc5")) returned 1 [0127.422] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.422] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.422] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.422] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.429] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2222, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.429] RtlGetLastWin32Error () returned 0x3e5 [0127.429] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.429] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2222, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.430] RtlGetLastWin32Error () returned 0x3e5 [0127.430] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.430] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2222, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.430] RtlGetLastWin32Error () returned 0x3e5 [0127.430] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.430] RtlGetLastWin32Error () returned 0x26 [0127.430] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.430] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.430] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.431] RtlGetLastWin32Error () returned 0x3e5 [0127.431] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.431] CloseHandle (hObject=0x3d0) returned 1 [0127.437] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12a) returned 0x1183b58 [0127.437] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26DBUodB_7d2qIG1Et.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26dbuodb_7d2qig1et.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26DBUodB_7d2qIG1Et.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\26dbuodb_7d2qig1et.jpg.1yg4ztc5")) returned 1 [0127.438] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.438] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.438] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.438] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.445] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x11583, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.446] RtlGetLastWin32Error () returned 0x3e5 [0127.446] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.446] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x11583, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.449] RtlGetLastWin32Error () returned 0x3e5 [0127.449] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.449] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x11583, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.449] RtlGetLastWin32Error () returned 0x3e5 [0127.449] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.449] RtlGetLastWin32Error () returned 0x26 [0127.449] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.449] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.449] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.450] RtlGetLastWin32Error () returned 0x3e5 [0127.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.450] CloseHandle (hObject=0x3d0) returned 1 [0127.453] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x110) returned 0x1183b58 [0127.454] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1R.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1r.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1R.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\ltr1r.png.1yg4ztc5")) returned 1 [0127.455] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.455] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.455] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.456] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.461] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4a6b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.462] RtlGetLastWin32Error () returned 0x3e5 [0127.462] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.462] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x4a6b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.463] RtlGetLastWin32Error () returned 0x3e5 [0127.463] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.463] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x4a6b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.463] RtlGetLastWin32Error () returned 0x3e5 [0127.463] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.463] RtlGetLastWin32Error () returned 0x26 [0127.463] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.463] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.464] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.464] RtlGetLastWin32Error () returned 0x3e5 [0127.464] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.464] CloseHandle (hObject=0x3d0) returned 1 [0127.468] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x11e) returned 0x1183b58 [0127.468] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meO9__dIW4.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meo9__diw4.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meO9__dIW4.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\q_meo9__diw4.png.1yg4ztc5")) returned 1 [0127.469] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.469] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.469] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.469] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.475] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc8e7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.476] RtlGetLastWin32Error () returned 0x3e5 [0127.476] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.476] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc8e7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.477] RtlGetLastWin32Error () returned 0x3e5 [0127.477] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.477] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc8e7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.478] RtlGetLastWin32Error () returned 0x3e5 [0127.478] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.478] RtlGetLastWin32Error () returned 0x26 [0127.478] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.478] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.478] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.478] RtlGetLastWin32Error () returned 0x3e5 [0127.478] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.478] CloseHandle (hObject=0x3d0) returned 1 [0127.481] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12c) returned 0x1183b58 [0127.481] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\VFbzrE9GSlvnX-dMGQl.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\vfbzre9gslvnx-dmgql.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\VFbzrE9GSlvnX-dMGQl.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\csz_z9wgnzb_japb\\vfbzre9gslvnx-dmgql.png.1yg4ztc5")) returned 1 [0127.482] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.482] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.482] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.484] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.491] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16d3e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.492] RtlGetLastWin32Error () returned 0x3e5 [0127.492] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.492] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x16d3e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.494] RtlGetLastWin32Error () returned 0x3e5 [0127.494] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.494] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16d3e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.494] RtlGetLastWin32Error () returned 0x3e5 [0127.494] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.494] RtlGetLastWin32Error () returned 0x26 [0127.494] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.495] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.495] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.496] RtlGetLastWin32Error () returned 0x3e5 [0127.496] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.496] CloseHandle (hObject=0x3d0) returned 1 [0127.502] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x12e) returned 0x11837d8 [0127.502] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rFoVM3vIT.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rfovm3vit.odp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rFoVM3vIT.odp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\8ihzrzb3zqqi\\rfovm3vit.odp.1yg4ztc5")) returned 1 [0127.503] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.503] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.503] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.504] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.520] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8ead, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.520] RtlGetLastWin32Error () returned 0x3e5 [0127.520] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.521] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x8ead, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.522] RtlGetLastWin32Error () returned 0x3e5 [0127.522] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.522] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8ead, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.522] RtlGetLastWin32Error () returned 0x3e5 [0127.522] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.522] RtlGetLastWin32Error () returned 0x26 [0127.522] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.522] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.522] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.523] RtlGetLastWin32Error () returned 0x3e5 [0127.523] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.523] CloseHandle (hObject=0x3d0) returned 1 [0127.547] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x142) returned 0x1183b58 [0127.547] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vByoCFGEN_dQ34ABZzD.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vbyocfgen_dq34abzzd.pdf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vByoCFGEN_dQ34ABZzD.pdf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vbyocfgen_dq34abzzd.pdf.1yg4ztc5")) returned 1 [0127.548] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.548] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.548] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.548] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.551] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x113c3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.552] RtlGetLastWin32Error () returned 0x3e5 [0127.552] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.553] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x113c3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.554] RtlGetLastWin32Error () returned 0x3e5 [0127.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.554] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x113c3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.554] RtlGetLastWin32Error () returned 0x3e5 [0127.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.554] RtlGetLastWin32Error () returned 0x26 [0127.554] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.554] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.555] RtlGetLastWin32Error () returned 0x3e5 [0127.555] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.555] CloseHandle (hObject=0x3d0) returned 1 [0127.559] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x136) returned 0x1183b58 [0127.560] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrRTEHJNU2f.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrrtehjnu2f.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrRTEHJNU2f.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\vtrrtehjnu2f.xlsx.1yg4ztc5")) returned 1 [0127.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.561] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.561] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.562] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.568] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb8ff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.569] RtlGetLastWin32Error () returned 0x3e5 [0127.569] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.569] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb8ff, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.571] RtlGetLastWin32Error () returned 0x3e5 [0127.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.571] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb8ff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.571] RtlGetLastWin32Error () returned 0x3e5 [0127.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.571] RtlGetLastWin32Error () returned 0x26 [0127.571] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.571] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.572] RtlGetLastWin32Error () returned 0x3e5 [0127.572] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.572] CloseHandle (hObject=0x3d0) returned 1 [0127.577] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x13a) returned 0x1183b58 [0127.577] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zFuPCcInHOUh c6.odp" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zfupccinhouh c6.odp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zFuPCcInHOUh c6.odp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\zfupccinhouh c6.odp.1yg4ztc5")) returned 1 [0127.578] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.578] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183b58) returned 1 [0127.578] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.579] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.597] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9b0e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.598] RtlGetLastWin32Error () returned 0x3e5 [0127.598] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.598] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x9b0e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.599] RtlGetLastWin32Error () returned 0x3e5 [0127.599] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.599] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9b0e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.599] RtlGetLastWin32Error () returned 0x3e5 [0127.599] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.599] RtlGetLastWin32Error () returned 0x26 [0127.599] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.599] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.599] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.599] RtlGetLastWin32Error () returned 0x3e5 [0127.599] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.600] CloseHandle (hObject=0x3d0) returned 1 [0127.604] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x142) returned 0x1183af0 [0127.605] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msUNAWZXS3N.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msunawzxs3n.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msUNAWZXS3N.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\msunawzxs3n.docx.1yg4ztc5")) returned 1 [0127.606] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.606] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.606] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.606] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.610] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1806, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.610] RtlGetLastWin32Error () returned 0x3e5 [0127.610] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.610] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1806, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.611] RtlGetLastWin32Error () returned 0x3e5 [0127.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.611] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1806, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.611] RtlGetLastWin32Error () returned 0x3e5 [0127.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.611] RtlGetLastWin32Error () returned 0x26 [0127.611] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.611] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.612] RtlGetLastWin32Error () returned 0x3e5 [0127.612] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.612] CloseHandle (hObject=0x3d0) returned 1 [0127.617] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x152) returned 0x1183af0 [0127.617] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pE1KWICFBjFCdIaD5N31.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pe1kwicfbjfcdiad5n31.ppt"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pE1KWICFBjFCdIaD5N31.ppt.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\fq_nxq\\pe1kwicfbjfcdiad5n31.ppt.1yg4ztc5")) returned 1 [0127.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.619] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.619] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.619] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.626] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12ea5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.627] RtlGetLastWin32Error () returned 0x3e5 [0127.627] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.628] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x12ea5, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.629] RtlGetLastWin32Error () returned 0x3e5 [0127.629] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.629] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12ea5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.629] RtlGetLastWin32Error () returned 0x3e5 [0127.629] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.630] RtlGetLastWin32Error () returned 0x26 [0127.630] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.630] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.630] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.630] RtlGetLastWin32Error () returned 0x3e5 [0127.630] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.630] CloseHandle (hObject=0x3d0) returned 1 [0127.645] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x15a) returned 0x1183af0 [0127.645] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\DepCFB0-o8xXJUSV-moM.ots" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\depcfb0-o8xxjusv-mom.ots"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\DepCFB0-o8xXJUSV-moM.ots.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\depcfb0-o8xxjusv-mom.ots.1yg4ztc5")) returned 1 [0127.647] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.647] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.647] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.648] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.659] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7d7e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.659] RtlGetLastWin32Error () returned 0x3e5 [0127.659] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.659] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x7d7e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.660] RtlGetLastWin32Error () returned 0x3e5 [0127.660] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.660] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7d7e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.660] RtlGetLastWin32Error () returned 0x3e5 [0127.660] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.661] RtlGetLastWin32Error () returned 0x26 [0127.661] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.661] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.661] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.661] RtlGetLastWin32Error () returned 0x3e5 [0127.661] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.661] CloseHandle (hObject=0x3d0) returned 1 [0127.664] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x148) returned 0x1183af0 [0127.664] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\sCcE3UCNSNz.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\scce3ucnsnz.pdf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\sCcE3UCNSNz.pdf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\scce3ucnsnz.pdf.1yg4ztc5")) returned 1 [0127.665] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.665] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.665] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.665] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.669] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x64d6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.670] RtlGetLastWin32Error () returned 0x3e5 [0127.670] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.670] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x64d6, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.671] RtlGetLastWin32Error () returned 0x3e5 [0127.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.671] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x64d6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.671] RtlGetLastWin32Error () returned 0x3e5 [0127.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.671] RtlGetLastWin32Error () returned 0x26 [0127.671] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.671] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.671] RtlGetLastWin32Error () returned 0x3e5 [0127.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.671] CloseHandle (hObject=0x3d0) returned 1 [0127.680] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x154) returned 0x1183af0 [0127.680] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\Vb2ektodNObV_mcps.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\vb2ektodnobv_mcps.xls"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\Vb2ektodNObV_mcps.xls.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\emsfznmumww2\\thzcjbusqm\\vb2ektodnobv_mcps.xls.1yg4ztc5")) returned 1 [0127.681] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.681] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.681] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.682] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.689] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5552, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.689] RtlGetLastWin32Error () returned 0x3e5 [0127.689] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.689] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x5552, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.690] RtlGetLastWin32Error () returned 0x3e5 [0127.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.690] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5552, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0127.690] RtlGetLastWin32Error () returned 0x3e5 [0127.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.690] RtlGetLastWin32Error () returned 0x26 [0127.690] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.691] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0127.691] RtlGetLastWin32Error () returned 0x3e5 [0127.691] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.691] CloseHandle (hObject=0x3d0) returned 1 [0127.697] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x14a) returned 0x1183af0 [0127.697] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgV3kSeR.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgv3kser.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgV3kSeR.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\2sgv3kser.xlsx.1yg4ztc5")) returned 1 [0127.698] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.698] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.699] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0127.699] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.704] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe04e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.705] RtlGetLastWin32Error () returned 0x3e5 [0127.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.705] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToWrite=0xe04e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.706] RtlGetLastWin32Error () returned 0x3e5 [0127.706] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.706] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe04e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.707] RtlGetLastWin32Error () returned 0x3e5 [0127.707] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.707] RtlGetLastWin32Error () returned 0x26 [0127.707] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.707] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.707] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.707] RtlGetLastWin32Error () returned 0x3e5 [0127.707] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.707] CloseHandle (hObject=0x3d0) returned 1 [0127.713] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x15e) returned 0x1183af0 [0127.713] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fPPdZaPlbnKdRA9cT2f.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fppdzaplbnkdra9ct2f.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fPPdZaPlbnKdRA9cT2f.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\fppdzaplbnkdra9ct2f.pptx.1yg4ztc5")) returned 1 [0127.714] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.714] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.714] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.716] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.721] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb4e5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.722] RtlGetLastWin32Error () returned 0x3e5 [0127.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.722] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb4e5, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.723] RtlGetLastWin32Error () returned 0x3e5 [0127.723] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.724] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb4e5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.724] RtlGetLastWin32Error () returned 0x3e5 [0127.724] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.724] RtlGetLastWin32Error () returned 0x26 [0127.724] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.724] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.724] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.724] RtlGetLastWin32Error () returned 0x3e5 [0127.724] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.725] CloseHandle (hObject=0x3d0) returned 1 [0127.727] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x14e) returned 0x1183af0 [0127.727] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\SUhmG_Z8a69h.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\suhmg_z8a69h.odt"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\SUhmG_Z8a69h.odt.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\i u2cg6ido\\suhmg_z8a69h.odt.1yg4ztc5")) returned 1 [0127.732] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.732] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183af0) returned 1 [0127.732] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.733] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.742] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12e6d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.743] RtlGetLastWin32Error () returned 0x3e5 [0127.743] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.744] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x12e6d, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.745] RtlGetLastWin32Error () returned 0x3e5 [0127.745] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.745] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12e6d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.745] RtlGetLastWin32Error () returned 0x3e5 [0127.746] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.746] RtlGetLastWin32Error () returned 0x26 [0127.746] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.746] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.746] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.746] RtlGetLastWin32Error () returned 0x3e5 [0127.746] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.747] CloseHandle (hObject=0x3d0) returned 1 [0127.752] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x136) returned 0x11837d8 [0127.752] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\nE5O.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\ne5o.odt"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\nE5O.odt.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\ne5o.odt.1yg4ztc5")) returned 1 [0127.757] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.757] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0127.757] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.758] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.761] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xec3d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0127.762] RtlGetLastWin32Error () returned 0x3e5 [0127.762] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.764] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xec3d, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.765] RtlGetLastWin32Error () returned 0x3e5 [0127.765] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.765] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xec3d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0127.765] RtlGetLastWin32Error () returned 0x3e5 [0127.765] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0127.765] RtlGetLastWin32Error () returned 0x26 [0127.766] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0127.766] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.766] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0127.766] RtlGetLastWin32Error () returned 0x3e5 [0127.766] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0127.766] CloseHandle (hObject=0x3dc) returned 1 [0127.773] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x146) returned 0x1183988 [0127.773] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\QVWuOcr0ZSOk.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\qvwuocr0zsok.csv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\QVWuOcr0ZSOk.csv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\xrle3k2z6t5mdwjru\\temgrn\\tqngadriwz 598\\x1ww2u\\qvwuocr0zsok.csv.1yg4ztc5")) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0127.774] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0127.775] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0130.301] WriteFile (in: hFile=0x3b8, lpBuffer=0x3b495fc*, nNumberOfBytesToWrite=0x61b64, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b494a0 | out: lpBuffer=0x3b495fc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b494a0) returned 1 [0130.302] RtlGetLastWin32Error () returned 0x3e5 [0130.302] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0130.306] ReadFile (in: hFile=0x3b8, lpBuffer=0x3b495fc, nNumberOfBytesToRead=0x61b64, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b494a0 | out: lpBuffer=0x3b495fc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b494a0) returned 0x0 [0130.306] RtlGetLastWin32Error () returned 0x3e5 [0130.306] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0130.306] RtlGetLastWin32Error () returned 0x26 [0130.306] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b494a0) returned 1 [0130.306] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0130.306] WriteFile (in: hFile=0x3b8, lpBuffer=0x3b494c8*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b494a0 | out: lpBuffer=0x3b494c8*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b494a0) returned 1 [0130.306] RtlGetLastWin32Error () returned 0x3e5 [0130.306] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0130.306] CloseHandle (hObject=0x3b8) returned 1 [0133.074] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x1183648 [0133.074] MoveFileW (lpExistingFileName="\\\\?\\c:\\bootmgr" (normalized: "c:\\bootmgr"), lpNewFileName="\\\\?\\c:\\bootmgr.1yg4ztc5" (normalized: "c:\\bootmgr.1yg4ztc5")) returned 0 [0133.074] RtlGetLastWin32Error () returned 0x5 [0133.074] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11fffa8) returned 1 [0133.074] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0133.075] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3b494a0) returned 1 [0133.080] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.086] WriteFile (in: hFile=0x3c0, lpBuffer=0x3bc8704*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc85a8 | out: lpBuffer=0x3bc8704*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc85a8) returned 1 [0133.086] RtlGetLastWin32Error () returned 0x3e5 [0133.086] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.086] ReadFile (in: hFile=0x3c0, lpBuffer=0x3bc8704, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc85a8 | out: lpBuffer=0x3bc8704, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc85a8) returned 0x0 [0133.086] RtlGetLastWin32Error () returned 0x3e5 [0133.086] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0133.086] RtlGetLastWin32Error () returned 0x26 [0133.086] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc85a8) returned 1 [0133.087] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.087] WriteFile (in: hFile=0x3c0, lpBuffer=0x3bc85d0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc85a8 | out: lpBuffer=0x3bc85d0*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc85a8) returned 1 [0133.087] RtlGetLastWin32Error () returned 0x3e5 [0133.087] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.087] CloseHandle (hObject=0x3c0) returned 1 [0133.092] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x9c) returned 0x1183648 [0133.093] MoveFileW (lpExistingFileName="\\\\?\\c:\\BOOTNXT" (normalized: "c:\\bootnxt"), lpNewFileName="\\\\?\\c:\\BOOTNXT.1yg4ztc5" (normalized: "c:\\bootnxt.1yg4ztc5")) returned 0 [0133.093] RtlGetLastWin32Error () returned 0x5 [0133.093] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117d958) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0133.093] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc85a8) returned 1 [0133.093] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.121] WriteFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.123] RtlGetLastWin32Error () returned 0x3e5 [0133.123] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.124] ReadFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020) returned 0x0 [0133.133] RtlGetLastWin32Error () returned 0x3e5 [0133.133] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.172] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0133.175] RtlGetLastWin32Error () returned 0x3e5 [0133.175] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.177] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0133.187] RtlGetLastWin32Error () returned 0x3e5 [0133.187] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.190] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0133.191] RtlGetLastWin32Error () returned 0x3e5 [0133.192] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.193] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0133.193] RtlGetLastWin32Error () returned 0x3e5 [0133.193] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0133.193] RtlGetLastWin32Error () returned 0x26 [0133.193] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0133.193] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.193] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0133.194] RtlGetLastWin32Error () returned 0x3e5 [0133.194] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.194] CloseHandle (hObject=0x3d4) returned 1 [0133.196] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x1183648 [0133.196] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\Bing.url" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\bing.url"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\favorites\\Bing.url.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\bing.url.1yg4ztc5")) returned 1 [0133.229] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0133.229] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0133.229] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0133.229] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.258] WriteFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.261] RtlGetLastWin32Error () returned 0x3e5 [0133.261] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.262] ReadFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020) returned 0x0 [0133.271] RtlGetLastWin32Error () returned 0x3e5 [0133.271] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.301] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0133.430] RtlGetLastWin32Error () returned 0x3e5 [0133.430] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.432] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0133.441] RtlGetLastWin32Error () returned 0x3e5 [0133.441] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.470] WriteFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.473] RtlGetLastWin32Error () returned 0x3e5 [0133.473] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.476] ReadFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020) returned 0x0 [0133.484] RtlGetLastWin32Error () returned 0x3e5 [0133.484] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.510] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0133.513] RtlGetLastWin32Error () returned 0x3e5 [0133.513] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.514] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0133.525] RtlGetLastWin32Error () returned 0x3e5 [0133.525] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.528] WriteFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.528] RtlGetLastWin32Error () returned 0x3e5 [0133.528] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.528] ReadFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020) returned 0x0 [0133.528] RtlGetLastWin32Error () returned 0x3e5 [0133.528] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0133.528] RtlGetLastWin32Error () returned 0x26 [0133.528] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.528] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.528] WriteFile (in: hFile=0x3c8, lpBuffer=0x3e6d048*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d048*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3e6d020) returned 1 [0133.529] RtlGetLastWin32Error () returned 0x3e5 [0133.529] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.529] CloseHandle (hObject=0x3c8) returned 1 [0133.807] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc4) returned 0x1183648 [0133.807] MoveFileW (lpExistingFileName="\\\\?\\c:\\recovery\\windowsre\\boot.sdi" (normalized: "c:\\recovery\\windowsre\\boot.sdi"), lpNewFileName="\\\\?\\c:\\recovery\\windowsre\\boot.sdi.1yg4ztc5" (normalized: "c:\\recovery\\windowsre\\boot.sdi.1yg4ztc5")) returned 0 [0133.807] RtlGetLastWin32Error () returned 0x5 [0133.807] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183738) returned 1 [0133.807] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0133.807] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3e6d020) returned 1 [0133.813] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.841] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0133.844] RtlGetLastWin32Error () returned 0x3e5 [0133.844] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.845] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0133.855] RtlGetLastWin32Error () returned 0x3e5 [0133.855] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.957] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0133.959] RtlGetLastWin32Error () returned 0x3e5 [0133.959] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.961] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0133.969] RtlGetLastWin32Error () returned 0x3e5 [0133.969] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0133.997] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.000] RtlGetLastWin32Error () returned 0x3e5 [0134.000] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.001] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0134.010] RtlGetLastWin32Error () returned 0x3e5 [0134.010] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.054] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.057] RtlGetLastWin32Error () returned 0x3e5 [0134.057] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.058] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.066] RtlGetLastWin32Error () returned 0x3e5 [0134.066] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.103] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.107] RtlGetLastWin32Error () returned 0x3e5 [0134.107] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.109] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0134.119] RtlGetLastWin32Error () returned 0x3e5 [0134.119] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.158] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.160] RtlGetLastWin32Error () returned 0x3e5 [0134.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.162] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.172] RtlGetLastWin32Error () returned 0x3e5 [0134.172] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.211] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.214] RtlGetLastWin32Error () returned 0x3e5 [0134.214] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.216] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.223] RtlGetLastWin32Error () returned 0x3e5 [0134.223] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.261] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.264] RtlGetLastWin32Error () returned 0x3e5 [0134.264] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.266] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.276] RtlGetLastWin32Error () returned 0x3e5 [0134.276] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.513] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.516] RtlGetLastWin32Error () returned 0x3e5 [0134.516] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.518] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.527] RtlGetLastWin32Error () returned 0x3e5 [0134.527] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.576] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.578] RtlGetLastWin32Error () returned 0x3e5 [0134.579] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.580] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.589] RtlGetLastWin32Error () returned 0x3e5 [0134.589] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.642] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.645] RtlGetLastWin32Error () returned 0x3e5 [0134.645] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.646] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.654] RtlGetLastWin32Error () returned 0x3e5 [0134.654] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.703] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.706] RtlGetLastWin32Error () returned 0x3e5 [0134.706] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.708] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.718] RtlGetLastWin32Error () returned 0x3e5 [0134.718] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.752] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.755] RtlGetLastWin32Error () returned 0x3e5 [0134.755] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.757] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.767] RtlGetLastWin32Error () returned 0x3e5 [0134.767] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.807] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.810] RtlGetLastWin32Error () returned 0x3e5 [0134.810] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.811] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0134.820] RtlGetLastWin32Error () returned 0x3e5 [0134.820] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.861] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.866] RtlGetLastWin32Error () returned 0x3e5 [0134.866] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.867] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0134.878] RtlGetLastWin32Error () returned 0x3e5 [0134.878] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.944] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.947] RtlGetLastWin32Error () returned 0x3e5 [0134.948] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.949] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0134.960] RtlGetLastWin32Error () returned 0x3e5 [0134.960] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.993] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0134.996] RtlGetLastWin32Error () returned 0x3e5 [0134.996] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0134.997] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0135.006] RtlGetLastWin32Error () returned 0x3e5 [0135.006] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.033] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.036] RtlGetLastWin32Error () returned 0x3e5 [0135.036] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.038] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0135.045] RtlGetLastWin32Error () returned 0x3e5 [0135.045] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.074] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.078] RtlGetLastWin32Error () returned 0x3e5 [0135.078] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.079] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0135.089] RtlGetLastWin32Error () returned 0x3e5 [0135.089] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.139] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.142] RtlGetLastWin32Error () returned 0x3e5 [0135.142] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.144] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0135.154] RtlGetLastWin32Error () returned 0x3e5 [0135.154] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.204] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.207] RtlGetLastWin32Error () returned 0x3e5 [0135.207] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.210] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0135.238] RtlGetLastWin32Error () returned 0x3e5 [0135.239] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.314] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.318] RtlGetLastWin32Error () returned 0x3e5 [0135.318] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.320] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0135.330] RtlGetLastWin32Error () returned 0x3e5 [0135.330] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.894] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0135.897] RtlGetLastWin32Error () returned 0x3e5 [0135.897] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0135.898] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0135.911] RtlGetLastWin32Error () returned 0x3e5 [0135.911] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.002] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0136.007] RtlGetLastWin32Error () returned 0x3e5 [0136.007] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.009] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0136.019] RtlGetLastWin32Error () returned 0x3e5 [0136.019] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.060] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0136.063] RtlGetLastWin32Error () returned 0x3e5 [0136.063] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.066] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0136.076] RtlGetLastWin32Error () returned 0x3e5 [0136.076] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.133] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0136.137] RtlGetLastWin32Error () returned 0x3e5 [0136.137] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0136.139] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0136.150] RtlGetLastWin32Error () returned 0x3e5 [0136.150] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0137.913] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0137.916] RtlGetLastWin32Error () returned 0x3e5 [0137.916] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0137.918] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0137.939] RtlGetLastWin32Error () returned 0x3e5 [0137.939] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0137.987] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0137.990] RtlGetLastWin32Error () returned 0x3e5 [0137.990] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0137.991] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0138.001] RtlGetLastWin32Error () returned 0x3e5 [0138.001] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.036] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.039] RtlGetLastWin32Error () returned 0x3e5 [0138.039] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.041] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0138.051] RtlGetLastWin32Error () returned 0x3e5 [0138.051] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.085] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.088] RtlGetLastWin32Error () returned 0x3e5 [0138.088] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.090] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.099] RtlGetLastWin32Error () returned 0x3e5 [0138.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.126] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.128] RtlGetLastWin32Error () returned 0x3e5 [0138.128] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.130] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.139] RtlGetLastWin32Error () returned 0x3e5 [0138.139] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.172] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.175] RtlGetLastWin32Error () returned 0x3e5 [0138.175] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.176] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.187] RtlGetLastWin32Error () returned 0x3e5 [0138.187] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.218] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.221] RtlGetLastWin32Error () returned 0x3e5 [0138.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.223] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0138.233] RtlGetLastWin32Error () returned 0x3e5 [0138.233] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.267] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.270] RtlGetLastWin32Error () returned 0x3e5 [0138.270] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.272] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.282] RtlGetLastWin32Error () returned 0x3e5 [0138.282] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.321] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.324] RtlGetLastWin32Error () returned 0x3e5 [0138.324] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.325] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.336] RtlGetLastWin32Error () returned 0x3e5 [0138.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.367] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.370] RtlGetLastWin32Error () returned 0x3e5 [0138.371] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.373] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0138.390] RtlGetLastWin32Error () returned 0x3e5 [0138.390] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.425] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.428] RtlGetLastWin32Error () returned 0x3e5 [0138.428] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.430] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0138.443] RtlGetLastWin32Error () returned 0x3e5 [0138.443] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.484] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0138.487] RtlGetLastWin32Error () returned 0x3e5 [0138.488] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0138.489] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0138.501] RtlGetLastWin32Error () returned 0x3e5 [0138.501] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.288] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0139.292] RtlGetLastWin32Error () returned 0x3e5 [0139.292] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.294] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0139.306] RtlGetLastWin32Error () returned 0x3e5 [0139.306] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.357] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0139.360] RtlGetLastWin32Error () returned 0x3e5 [0139.360] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.361] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0139.373] RtlGetLastWin32Error () returned 0x3e5 [0139.373] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.413] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0139.416] RtlGetLastWin32Error () returned 0x3e5 [0139.416] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0139.418] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0139.427] RtlGetLastWin32Error () returned 0x3e5 [0139.427] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.056] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.059] RtlGetLastWin32Error () returned 0x3e5 [0140.059] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.061] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.071] RtlGetLastWin32Error () returned 0x3e5 [0140.071] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.110] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.113] RtlGetLastWin32Error () returned 0x3e5 [0140.113] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.114] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0140.124] RtlGetLastWin32Error () returned 0x3e5 [0140.124] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.167] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.170] RtlGetLastWin32Error () returned 0x3e5 [0140.170] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.172] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.195] RtlGetLastWin32Error () returned 0x3e5 [0140.195] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.233] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.236] RtlGetLastWin32Error () returned 0x3e5 [0140.236] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.238] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0140.251] RtlGetLastWin32Error () returned 0x3e5 [0140.252] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.292] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.295] RtlGetLastWin32Error () returned 0x3e5 [0140.295] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.296] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.305] RtlGetLastWin32Error () returned 0x3e5 [0140.305] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.348] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.351] RtlGetLastWin32Error () returned 0x3e5 [0140.351] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.351] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.362] RtlGetLastWin32Error () returned 0x3e5 [0140.362] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.485] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.489] RtlGetLastWin32Error () returned 0x3e5 [0140.489] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.489] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.500] RtlGetLastWin32Error () returned 0x3e5 [0140.500] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.575] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0140.578] RtlGetLastWin32Error () returned 0x3e5 [0140.578] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0140.578] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0140.596] RtlGetLastWin32Error () returned 0x3e5 [0140.596] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.425] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.429] RtlGetLastWin32Error () returned 0x3e5 [0141.429] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.429] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.441] RtlGetLastWin32Error () returned 0x3e5 [0141.441] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.472] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.477] RtlGetLastWin32Error () returned 0x3e5 [0141.477] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.477] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.501] RtlGetLastWin32Error () returned 0x3e5 [0141.501] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.549] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.553] RtlGetLastWin32Error () returned 0x3e5 [0141.553] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.553] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.563] RtlGetLastWin32Error () returned 0x3e5 [0141.563] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.602] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.608] RtlGetLastWin32Error () returned 0x3e5 [0141.608] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.608] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.635] RtlGetLastWin32Error () returned 0x3e5 [0141.636] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.679] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.682] RtlGetLastWin32Error () returned 0x3e5 [0141.682] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.682] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0141.691] RtlGetLastWin32Error () returned 0x3e5 [0141.691] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.744] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.747] RtlGetLastWin32Error () returned 0x3e5 [0141.747] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.747] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.762] RtlGetLastWin32Error () returned 0x3e5 [0141.762] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.803] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0141.814] RtlGetLastWin32Error () returned 0x3e5 [0141.814] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.814] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.826] RtlGetLastWin32Error () returned 0x3e5 [0141.826] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.886] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.892] RtlGetLastWin32Error () returned 0x3e5 [0141.892] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.892] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0141.913] RtlGetLastWin32Error () returned 0x3e5 [0141.913] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.990] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0141.993] RtlGetLastWin32Error () returned 0x3e5 [0141.993] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0141.993] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0142.005] RtlGetLastWin32Error () returned 0x3e5 [0142.005] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.080] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.083] RtlGetLastWin32Error () returned 0x3e5 [0142.083] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.083] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0142.094] RtlGetLastWin32Error () returned 0x3e5 [0142.094] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.156] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.159] RtlGetLastWin32Error () returned 0x3e5 [0142.159] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.160] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0142.183] RtlGetLastWin32Error () returned 0x3e5 [0142.183] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.227] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.231] RtlGetLastWin32Error () returned 0x3e5 [0142.231] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.233] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0142.259] RtlGetLastWin32Error () returned 0x3e5 [0142.259] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.309] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.312] RtlGetLastWin32Error () returned 0x3e5 [0142.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.312] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0142.346] RtlGetLastWin32Error () returned 0x3e5 [0142.346] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.415] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.421] RtlGetLastWin32Error () returned 0x3e5 [0142.421] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.421] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0142.479] RtlGetLastWin32Error () returned 0x3e5 [0142.479] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.570] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0142.573] RtlGetLastWin32Error () returned 0x3e5 [0142.573] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0142.574] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0142.587] RtlGetLastWin32Error () returned 0x3e5 [0142.587] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0143.204] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0143.208] RtlGetLastWin32Error () returned 0x3e5 [0143.208] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0143.208] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0143.216] RtlGetLastWin32Error () returned 0x3e5 [0143.216] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0144.912] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0144.915] RtlGetLastWin32Error () returned 0x3e5 [0144.915] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0144.915] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0144.926] RtlGetLastWin32Error () returned 0x3e5 [0144.926] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0144.973] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0144.976] RtlGetLastWin32Error () returned 0x3e5 [0144.976] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0144.976] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0144.986] RtlGetLastWin32Error () returned 0x3e5 [0144.987] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.075] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0145.096] RtlGetLastWin32Error () returned 0x3e5 [0145.096] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.097] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0145.172] RtlGetLastWin32Error () returned 0x3e5 [0145.188] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.257] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0145.260] RtlGetLastWin32Error () returned 0x3e5 [0145.260] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.260] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0145.270] RtlGetLastWin32Error () returned 0x3e5 [0145.270] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.306] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0145.310] RtlGetLastWin32Error () returned 0x3e5 [0145.310] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.310] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0145.320] RtlGetLastWin32Error () returned 0x3e5 [0145.320] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.371] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0145.380] RtlGetLastWin32Error () returned 0x3e5 [0145.380] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.380] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0145.408] RtlGetLastWin32Error () returned 0x3e5 [0145.408] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.446] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0145.449] RtlGetLastWin32Error () returned 0x3e5 [0145.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.450] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0145.460] RtlGetLastWin32Error () returned 0x3e5 [0145.460] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.544] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0145.552] RtlGetLastWin32Error () returned 0x3e5 [0145.552] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0145.552] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0145.576] RtlGetLastWin32Error () returned 0x3e5 [0145.576] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.305] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.308] RtlGetLastWin32Error () returned 0x3e5 [0146.308] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.308] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0146.318] RtlGetLastWin32Error () returned 0x3e5 [0146.318] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.350] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.353] RtlGetLastWin32Error () returned 0x3e5 [0146.353] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.353] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0146.362] RtlGetLastWin32Error () returned 0x3e5 [0146.362] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.437] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.442] RtlGetLastWin32Error () returned 0x3e5 [0146.442] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.442] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.453] RtlGetLastWin32Error () returned 0x3e5 [0146.454] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.482] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.485] RtlGetLastWin32Error () returned 0x3e5 [0146.485] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.485] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.503] RtlGetLastWin32Error () returned 0x3e5 [0146.504] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.581] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.584] RtlGetLastWin32Error () returned 0x3e5 [0146.584] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.584] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.621] RtlGetLastWin32Error () returned 0x3e5 [0146.621] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.662] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.665] RtlGetLastWin32Error () returned 0x3e5 [0146.665] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.666] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0146.677] RtlGetLastWin32Error () returned 0x3e5 [0146.677] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.753] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.757] RtlGetLastWin32Error () returned 0x3e5 [0146.757] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.757] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.793] RtlGetLastWin32Error () returned 0x3e5 [0146.793] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.848] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.852] RtlGetLastWin32Error () returned 0x3e5 [0146.852] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.852] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.863] RtlGetLastWin32Error () returned 0x3e5 [0146.863] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.901] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.904] RtlGetLastWin32Error () returned 0x3e5 [0146.904] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.904] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0146.916] RtlGetLastWin32Error () returned 0x3e5 [0146.916] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.950] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0146.953] RtlGetLastWin32Error () returned 0x3e5 [0146.953] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0146.953] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0146.963] RtlGetLastWin32Error () returned 0x3e5 [0146.963] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.359] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.361] RtlGetLastWin32Error () returned 0x3e5 [0147.362] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.362] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0147.370] RtlGetLastWin32Error () returned 0x3e5 [0147.370] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.422] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.426] RtlGetLastWin32Error () returned 0x3e5 [0147.426] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.426] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0147.436] RtlGetLastWin32Error () returned 0x3e5 [0147.436] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.492] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.495] RtlGetLastWin32Error () returned 0x3e5 [0147.495] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.495] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0147.506] RtlGetLastWin32Error () returned 0x3e5 [0147.506] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.668] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.672] RtlGetLastWin32Error () returned 0x3e5 [0147.672] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.672] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0147.682] RtlGetLastWin32Error () returned 0x3e5 [0147.682] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.728] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.731] RtlGetLastWin32Error () returned 0x3e5 [0147.731] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.731] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0147.743] RtlGetLastWin32Error () returned 0x3e5 [0147.743] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.779] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.782] RtlGetLastWin32Error () returned 0x3e5 [0147.782] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.782] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0147.793] RtlGetLastWin32Error () returned 0x3e5 [0147.793] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.835] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.839] RtlGetLastWin32Error () returned 0x3e5 [0147.839] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.839] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0147.849] RtlGetLastWin32Error () returned 0x3e5 [0147.849] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.897] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.900] RtlGetLastWin32Error () returned 0x3e5 [0147.900] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.900] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0147.910] RtlGetLastWin32Error () returned 0x3e5 [0147.910] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.981] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0147.985] RtlGetLastWin32Error () returned 0x3e5 [0147.985] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0147.985] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0147.995] RtlGetLastWin32Error () returned 0x3e5 [0147.995] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.028] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.031] RtlGetLastWin32Error () returned 0x3e5 [0148.031] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.031] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.049] RtlGetLastWin32Error () returned 0x3e5 [0148.049] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.076] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.079] RtlGetLastWin32Error () returned 0x3e5 [0148.079] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.079] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0148.089] RtlGetLastWin32Error () returned 0x3e5 [0148.089] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.118] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.121] RtlGetLastWin32Error () returned 0x3e5 [0148.122] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.122] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.133] RtlGetLastWin32Error () returned 0x3e5 [0148.133] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.168] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.173] RtlGetLastWin32Error () returned 0x3e5 [0148.173] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.173] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.184] RtlGetLastWin32Error () returned 0x3e5 [0148.184] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.231] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.235] RtlGetLastWin32Error () returned 0x3e5 [0148.235] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.235] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.246] RtlGetLastWin32Error () returned 0x3e5 [0148.246] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.284] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.287] RtlGetLastWin32Error () returned 0x3e5 [0148.288] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.288] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.300] RtlGetLastWin32Error () returned 0x3e5 [0148.300] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.338] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.342] RtlGetLastWin32Error () returned 0x3e5 [0148.342] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.342] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.353] RtlGetLastWin32Error () returned 0x3e5 [0148.353] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.447] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0148.450] RtlGetLastWin32Error () returned 0x3e5 [0148.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0148.450] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0148.462] RtlGetLastWin32Error () returned 0x3e5 [0148.462] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.277] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.280] RtlGetLastWin32Error () returned 0x3e5 [0151.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.280] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0151.289] RtlGetLastWin32Error () returned 0x3e5 [0151.289] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.352] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.355] RtlGetLastWin32Error () returned 0x3e5 [0151.355] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.355] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.366] RtlGetLastWin32Error () returned 0x3e5 [0151.366] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.399] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.402] RtlGetLastWin32Error () returned 0x3e5 [0151.402] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.402] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.413] RtlGetLastWin32Error () returned 0x3e5 [0151.413] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.449] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.452] RtlGetLastWin32Error () returned 0x3e5 [0151.452] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.452] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0151.463] RtlGetLastWin32Error () returned 0x3e5 [0151.463] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.498] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.501] RtlGetLastWin32Error () returned 0x3e5 [0151.501] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.501] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.510] RtlGetLastWin32Error () returned 0x3e5 [0151.510] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.543] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.546] RtlGetLastWin32Error () returned 0x3e5 [0151.546] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.546] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.559] RtlGetLastWin32Error () returned 0x3e5 [0151.559] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.600] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.603] RtlGetLastWin32Error () returned 0x3e5 [0151.603] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.605] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0151.616] RtlGetLastWin32Error () returned 0x3e5 [0151.616] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.725] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.727] RtlGetLastWin32Error () returned 0x3e5 [0151.727] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.727] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.736] RtlGetLastWin32Error () returned 0x3e5 [0151.736] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.766] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0151.769] RtlGetLastWin32Error () returned 0x3e5 [0151.769] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0151.769] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0151.780] RtlGetLastWin32Error () returned 0x3e5 [0151.780] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.247] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.249] RtlGetLastWin32Error () returned 0x3e5 [0154.249] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.250] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0154.258] RtlGetLastWin32Error () returned 0x3e5 [0154.258] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.324] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.327] RtlGetLastWin32Error () returned 0x3e5 [0154.327] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.327] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0154.335] RtlGetLastWin32Error () returned 0x3e5 [0154.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.369] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.373] RtlGetLastWin32Error () returned 0x3e5 [0154.373] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.373] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.382] RtlGetLastWin32Error () returned 0x3e5 [0154.382] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.430] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.433] RtlGetLastWin32Error () returned 0x3e5 [0154.433] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.433] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.443] RtlGetLastWin32Error () returned 0x3e5 [0154.443] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.473] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.476] RtlGetLastWin32Error () returned 0x3e5 [0154.476] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.476] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.485] RtlGetLastWin32Error () returned 0x3e5 [0154.485] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.534] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.537] RtlGetLastWin32Error () returned 0x3e5 [0154.537] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.537] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.550] RtlGetLastWin32Error () returned 0x3e5 [0154.550] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.610] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.616] RtlGetLastWin32Error () returned 0x3e5 [0154.616] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.616] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0154.628] RtlGetLastWin32Error () returned 0x3e5 [0154.628] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.694] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0154.697] RtlGetLastWin32Error () returned 0x3e5 [0154.697] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0154.697] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0154.705] RtlGetLastWin32Error () returned 0x3e5 [0154.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.401] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0155.405] RtlGetLastWin32Error () returned 0x3e5 [0155.405] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.405] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0155.415] RtlGetLastWin32Error () returned 0x3e5 [0155.415] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.449] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0155.453] RtlGetLastWin32Error () returned 0x3e5 [0155.453] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.453] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0155.463] RtlGetLastWin32Error () returned 0x3e5 [0155.463] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.494] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0155.498] RtlGetLastWin32Error () returned 0x3e5 [0155.498] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.498] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0155.513] RtlGetLastWin32Error () returned 0x3e5 [0155.513] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.552] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0155.555] RtlGetLastWin32Error () returned 0x3e5 [0155.555] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0155.555] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0155.565] RtlGetLastWin32Error () returned 0x3e5 [0155.565] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.129] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.132] RtlGetLastWin32Error () returned 0x3e5 [0156.132] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.132] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.149] RtlGetLastWin32Error () returned 0x3e5 [0156.149] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.184] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.186] RtlGetLastWin32Error () returned 0x3e5 [0156.186] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.186] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.195] RtlGetLastWin32Error () returned 0x3e5 [0156.195] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.227] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.230] RtlGetLastWin32Error () returned 0x3e5 [0156.230] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.230] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.239] RtlGetLastWin32Error () returned 0x3e5 [0156.239] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.270] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.272] RtlGetLastWin32Error () returned 0x3e5 [0156.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.273] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.280] RtlGetLastWin32Error () returned 0x3e5 [0156.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.319] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.322] RtlGetLastWin32Error () returned 0x3e5 [0156.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.323] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.332] RtlGetLastWin32Error () returned 0x3e5 [0156.332] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.370] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.373] RtlGetLastWin32Error () returned 0x3e5 [0156.373] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.373] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.382] RtlGetLastWin32Error () returned 0x3e5 [0156.382] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.417] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.419] RtlGetLastWin32Error () returned 0x3e5 [0156.419] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.419] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.431] RtlGetLastWin32Error () returned 0x3e5 [0156.431] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.459] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.462] RtlGetLastWin32Error () returned 0x3e5 [0156.462] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.462] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0156.471] RtlGetLastWin32Error () returned 0x3e5 [0156.471] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.499] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.503] RtlGetLastWin32Error () returned 0x3e5 [0156.503] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.503] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.514] RtlGetLastWin32Error () returned 0x3e5 [0156.514] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.563] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.566] RtlGetLastWin32Error () returned 0x3e5 [0156.566] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.566] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0156.573] RtlGetLastWin32Error () returned 0x3e5 [0156.573] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.598] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.601] RtlGetLastWin32Error () returned 0x3e5 [0156.601] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.601] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.611] RtlGetLastWin32Error () returned 0x3e5 [0156.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.646] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.650] RtlGetLastWin32Error () returned 0x3e5 [0156.650] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.650] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0156.664] RtlGetLastWin32Error () returned 0x3e5 [0156.664] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.691] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.693] RtlGetLastWin32Error () returned 0x3e5 [0156.693] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.693] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.880] RtlGetLastWin32Error () returned 0x3e5 [0156.880] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.909] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.912] RtlGetLastWin32Error () returned 0x3e5 [0156.912] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.912] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0156.921] RtlGetLastWin32Error () returned 0x3e5 [0156.921] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.953] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0156.956] RtlGetLastWin32Error () returned 0x3e5 [0156.956] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.956] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0156.966] RtlGetLastWin32Error () returned 0x3e5 [0156.966] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.992] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0156.995] RtlGetLastWin32Error () returned 0x3e5 [0156.995] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0156.995] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.003] RtlGetLastWin32Error () returned 0x3e5 [0157.003] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.096] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.100] RtlGetLastWin32Error () returned 0x3e5 [0157.100] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.100] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.111] RtlGetLastWin32Error () returned 0x3e5 [0157.111] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.148] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.153] RtlGetLastWin32Error () returned 0x3e5 [0157.153] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.153] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.167] RtlGetLastWin32Error () returned 0x3e5 [0157.167] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.204] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.208] RtlGetLastWin32Error () returned 0x3e5 [0157.208] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.208] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.219] RtlGetLastWin32Error () returned 0x3e5 [0157.219] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.275] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.278] RtlGetLastWin32Error () returned 0x3e5 [0157.278] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.278] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0157.289] RtlGetLastWin32Error () returned 0x3e5 [0157.289] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.322] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.325] RtlGetLastWin32Error () returned 0x3e5 [0157.325] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.325] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.346] RtlGetLastWin32Error () returned 0x3e5 [0157.346] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.378] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.393] RtlGetLastWin32Error () returned 0x3e5 [0157.393] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.393] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0157.414] RtlGetLastWin32Error () returned 0x3e5 [0157.414] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.471] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.474] RtlGetLastWin32Error () returned 0x3e5 [0157.474] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.474] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0157.485] RtlGetLastWin32Error () returned 0x3e5 [0157.485] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.604] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0157.611] RtlGetLastWin32Error () returned 0x3e5 [0157.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0157.611] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0157.624] RtlGetLastWin32Error () returned 0x3e5 [0157.624] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.091] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.094] RtlGetLastWin32Error () returned 0x3e5 [0160.094] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.094] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0160.103] RtlGetLastWin32Error () returned 0x3e5 [0160.103] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.143] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.146] RtlGetLastWin32Error () returned 0x3e5 [0160.146] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.146] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0160.156] RtlGetLastWin32Error () returned 0x3e5 [0160.156] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.213] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.216] RtlGetLastWin32Error () returned 0x3e5 [0160.216] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.216] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0160.225] RtlGetLastWin32Error () returned 0x3e5 [0160.225] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.308] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.311] RtlGetLastWin32Error () returned 0x3e5 [0160.311] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.311] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0160.322] RtlGetLastWin32Error () returned 0x3e5 [0160.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.371] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.374] RtlGetLastWin32Error () returned 0x3e5 [0160.374] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.374] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0160.384] RtlGetLastWin32Error () returned 0x3e5 [0160.384] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.488] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.490] RtlGetLastWin32Error () returned 0x3e5 [0160.490] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.491] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0160.500] RtlGetLastWin32Error () returned 0x3e5 [0160.500] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.653] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0160.656] RtlGetLastWin32Error () returned 0x3e5 [0160.657] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0160.657] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0160.664] RtlGetLastWin32Error () returned 0x3e5 [0160.664] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.238] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0165.241] RtlGetLastWin32Error () returned 0x3e5 [0165.241] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.241] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0165.249] RtlGetLastWin32Error () returned 0x3e5 [0165.249] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.292] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0165.295] RtlGetLastWin32Error () returned 0x3e5 [0165.295] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.295] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0165.305] RtlGetLastWin32Error () returned 0x3e5 [0165.305] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.359] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0165.362] RtlGetLastWin32Error () returned 0x3e5 [0165.363] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0165.363] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0165.383] RtlGetLastWin32Error () returned 0x3e5 [0165.383] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.791] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0166.794] RtlGetLastWin32Error () returned 0x3e5 [0166.794] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.794] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0166.806] RtlGetLastWin32Error () returned 0x3e5 [0166.806] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.848] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0166.850] RtlGetLastWin32Error () returned 0x3e5 [0166.850] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.850] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0166.858] RtlGetLastWin32Error () returned 0x3e5 [0166.858] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.883] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0166.886] RtlGetLastWin32Error () returned 0x3e5 [0166.886] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.886] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0166.895] RtlGetLastWin32Error () returned 0x3e5 [0166.895] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.921] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0166.923] RtlGetLastWin32Error () returned 0x3e5 [0166.923] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.923] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0166.931] RtlGetLastWin32Error () returned 0x3e5 [0166.931] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.953] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0166.955] RtlGetLastWin32Error () returned 0x3e5 [0166.956] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.956] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0166.963] RtlGetLastWin32Error () returned 0x3e5 [0166.963] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.991] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0166.996] RtlGetLastWin32Error () returned 0x3e5 [0166.996] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0166.996] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0167.014] RtlGetLastWin32Error () returned 0x3e5 [0167.014] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.052] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.057] RtlGetLastWin32Error () returned 0x3e5 [0167.057] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.057] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0167.066] RtlGetLastWin32Error () returned 0x3e5 [0167.066] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.115] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.125] RtlGetLastWin32Error () returned 0x3e5 [0167.125] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.125] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0167.135] RtlGetLastWin32Error () returned 0x3e5 [0167.135] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.602] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.605] RtlGetLastWin32Error () returned 0x3e5 [0167.605] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.605] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0167.613] RtlGetLastWin32Error () returned 0x3e5 [0167.613] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.655] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.659] RtlGetLastWin32Error () returned 0x3e5 [0167.659] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.659] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0167.671] RtlGetLastWin32Error () returned 0x3e5 [0167.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.736] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.740] RtlGetLastWin32Error () returned 0x3e5 [0167.740] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.740] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0167.750] RtlGetLastWin32Error () returned 0x3e5 [0167.750] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.802] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.806] RtlGetLastWin32Error () returned 0x3e5 [0167.806] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.806] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0167.818] RtlGetLastWin32Error () returned 0x3e5 [0167.818] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.891] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0167.894] RtlGetLastWin32Error () returned 0x3e5 [0167.894] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.894] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0167.904] RtlGetLastWin32Error () returned 0x3e5 [0167.904] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.943] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0167.946] RtlGetLastWin32Error () returned 0x3e5 [0167.946] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0167.946] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0167.957] RtlGetLastWin32Error () returned 0x3e5 [0167.957] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.464] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.479] RtlGetLastWin32Error () returned 0x3e5 [0168.479] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.479] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.489] RtlGetLastWin32Error () returned 0x3e5 [0168.489] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.516] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.518] RtlGetLastWin32Error () returned 0x3e5 [0168.518] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.519] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.527] RtlGetLastWin32Error () returned 0x3e5 [0168.527] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.558] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.561] RtlGetLastWin32Error () returned 0x3e5 [0168.561] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.561] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.571] RtlGetLastWin32Error () returned 0x3e5 [0168.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.621] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0168.624] RtlGetLastWin32Error () returned 0x3e5 [0168.624] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.624] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.636] RtlGetLastWin32Error () returned 0x3e5 [0168.636] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.696] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.699] RtlGetLastWin32Error () returned 0x3e5 [0168.699] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.699] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0168.710] RtlGetLastWin32Error () returned 0x3e5 [0168.710] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.784] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.787] RtlGetLastWin32Error () returned 0x3e5 [0168.787] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.787] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.797] RtlGetLastWin32Error () returned 0x3e5 [0168.797] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.861] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.865] RtlGetLastWin32Error () returned 0x3e5 [0168.865] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.865] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0168.875] RtlGetLastWin32Error () returned 0x3e5 [0168.875] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.910] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0168.914] RtlGetLastWin32Error () returned 0x3e5 [0168.914] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.914] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0168.924] RtlGetLastWin32Error () returned 0x3e5 [0168.924] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0168.999] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0169.002] RtlGetLastWin32Error () returned 0x3e5 [0169.002] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.002] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0169.012] RtlGetLastWin32Error () returned 0x3e5 [0169.012] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.044] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0169.047] RtlGetLastWin32Error () returned 0x3e5 [0169.047] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.047] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0169.057] RtlGetLastWin32Error () returned 0x3e5 [0169.057] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.157] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0169.160] RtlGetLastWin32Error () returned 0x3e5 [0169.160] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.160] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0169.180] RtlGetLastWin32Error () returned 0x3e5 [0169.180] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.225] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0169.229] RtlGetLastWin32Error () returned 0x3e5 [0169.229] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.229] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0169.242] RtlGetLastWin32Error () returned 0x3e5 [0169.242] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.278] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0169.284] RtlGetLastWin32Error () returned 0x3e5 [0169.284] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0169.285] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0169.295] RtlGetLastWin32Error () returned 0x3e5 [0169.295] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.145] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.149] RtlGetLastWin32Error () returned 0x3e5 [0170.150] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.150] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.161] RtlGetLastWin32Error () returned 0x3e5 [0170.161] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.225] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.228] RtlGetLastWin32Error () returned 0x3e5 [0170.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.228] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.239] RtlGetLastWin32Error () returned 0x3e5 [0170.239] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.281] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.284] RtlGetLastWin32Error () returned 0x3e5 [0170.284] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.284] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.296] RtlGetLastWin32Error () returned 0x3e5 [0170.296] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.332] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.336] RtlGetLastWin32Error () returned 0x3e5 [0170.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.336] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.346] RtlGetLastWin32Error () returned 0x3e5 [0170.346] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.381] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.384] RtlGetLastWin32Error () returned 0x3e5 [0170.384] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.384] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.400] RtlGetLastWin32Error () returned 0x3e5 [0170.400] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.438] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.441] RtlGetLastWin32Error () returned 0x3e5 [0170.441] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.441] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.454] RtlGetLastWin32Error () returned 0x3e5 [0170.454] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.765] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.768] RtlGetLastWin32Error () returned 0x3e5 [0170.768] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.769] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.780] RtlGetLastWin32Error () returned 0x3e5 [0170.780] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.809] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.812] RtlGetLastWin32Error () returned 0x3e5 [0170.812] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.812] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.822] RtlGetLastWin32Error () returned 0x3e5 [0170.822] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.867] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.870] RtlGetLastWin32Error () returned 0x3e5 [0170.870] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.871] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.881] RtlGetLastWin32Error () returned 0x3e5 [0170.881] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.914] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0170.917] RtlGetLastWin32Error () returned 0x3e5 [0170.917] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.917] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0170.927] RtlGetLastWin32Error () returned 0x3e5 [0170.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.963] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.967] RtlGetLastWin32Error () returned 0x3e5 [0170.967] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0170.967] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0170.977] RtlGetLastWin32Error () returned 0x3e5 [0170.977] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.011] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.014] RtlGetLastWin32Error () returned 0x3e5 [0171.014] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.014] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0171.026] RtlGetLastWin32Error () returned 0x3e5 [0171.026] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.071] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.075] RtlGetLastWin32Error () returned 0x3e5 [0171.075] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.075] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.085] RtlGetLastWin32Error () returned 0x3e5 [0171.085] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.128] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.131] RtlGetLastWin32Error () returned 0x3e5 [0171.131] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.131] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.142] RtlGetLastWin32Error () returned 0x3e5 [0171.142] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.172] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.175] RtlGetLastWin32Error () returned 0x3e5 [0171.175] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.175] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.185] RtlGetLastWin32Error () returned 0x3e5 [0171.185] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.215] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.218] RtlGetLastWin32Error () returned 0x3e5 [0171.218] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.218] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.228] RtlGetLastWin32Error () returned 0x3e5 [0171.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.255] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.257] RtlGetLastWin32Error () returned 0x3e5 [0171.257] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.257] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.266] RtlGetLastWin32Error () returned 0x3e5 [0171.266] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.302] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.305] RtlGetLastWin32Error () returned 0x3e5 [0171.305] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.305] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.316] RtlGetLastWin32Error () returned 0x3e5 [0171.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.352] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.355] RtlGetLastWin32Error () returned 0x3e5 [0171.355] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.355] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.364] RtlGetLastWin32Error () returned 0x3e5 [0171.364] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.397] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.400] RtlGetLastWin32Error () returned 0x3e5 [0171.400] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.400] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0171.410] RtlGetLastWin32Error () returned 0x3e5 [0171.410] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.437] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0171.440] RtlGetLastWin32Error () returned 0x3e5 [0171.440] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.440] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.451] RtlGetLastWin32Error () returned 0x3e5 [0171.451] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.485] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.489] RtlGetLastWin32Error () returned 0x3e5 [0171.489] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.489] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.499] RtlGetLastWin32Error () returned 0x3e5 [0171.499] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.624] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.627] RtlGetLastWin32Error () returned 0x3e5 [0171.627] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.627] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.638] RtlGetLastWin32Error () returned 0x3e5 [0171.638] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.670] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.673] RtlGetLastWin32Error () returned 0x3e5 [0171.673] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.673] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0171.685] RtlGetLastWin32Error () returned 0x3e5 [0171.685] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.759] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.762] RtlGetLastWin32Error () returned 0x3e5 [0171.762] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.762] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.777] RtlGetLastWin32Error () returned 0x3e5 [0171.777] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.810] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.813] RtlGetLastWin32Error () returned 0x3e5 [0171.813] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.813] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.824] RtlGetLastWin32Error () returned 0x3e5 [0171.824] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.864] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0171.867] RtlGetLastWin32Error () returned 0x3e5 [0171.867] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.868] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.878] RtlGetLastWin32Error () returned 0x3e5 [0171.878] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.908] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.910] RtlGetLastWin32Error () returned 0x3e5 [0171.910] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.910] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.920] RtlGetLastWin32Error () returned 0x3e5 [0171.920] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.958] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0171.962] RtlGetLastWin32Error () returned 0x3e5 [0171.962] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0171.962] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0171.972] RtlGetLastWin32Error () returned 0x3e5 [0171.972] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.012] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.015] RtlGetLastWin32Error () returned 0x3e5 [0172.015] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.015] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.026] RtlGetLastWin32Error () returned 0x3e5 [0172.026] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.069] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.073] RtlGetLastWin32Error () returned 0x3e5 [0172.073] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.073] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.083] RtlGetLastWin32Error () returned 0x3e5 [0172.083] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.121] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.124] RtlGetLastWin32Error () returned 0x3e5 [0172.124] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.124] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.133] RtlGetLastWin32Error () returned 0x3e5 [0172.133] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.165] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.167] RtlGetLastWin32Error () returned 0x3e5 [0172.168] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.168] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.176] RtlGetLastWin32Error () returned 0x3e5 [0172.176] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.208] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.211] RtlGetLastWin32Error () returned 0x3e5 [0172.212] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.212] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.221] RtlGetLastWin32Error () returned 0x3e5 [0172.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.270] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.284] RtlGetLastWin32Error () returned 0x3e5 [0172.284] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.284] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.304] RtlGetLastWin32Error () returned 0x3e5 [0172.304] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.700] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.703] RtlGetLastWin32Error () returned 0x3e5 [0172.703] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.703] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.713] RtlGetLastWin32Error () returned 0x3e5 [0172.713] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.764] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.767] RtlGetLastWin32Error () returned 0x3e5 [0172.767] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.767] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.778] RtlGetLastWin32Error () returned 0x3e5 [0172.778] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.806] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.808] RtlGetLastWin32Error () returned 0x3e5 [0172.808] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.808] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.817] RtlGetLastWin32Error () returned 0x3e5 [0172.817] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.846] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.849] RtlGetLastWin32Error () returned 0x3e5 [0172.849] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.850] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.858] RtlGetLastWin32Error () returned 0x3e5 [0172.858] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.886] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0172.889] RtlGetLastWin32Error () returned 0x3e5 [0172.889] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.889] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.899] RtlGetLastWin32Error () returned 0x3e5 [0172.899] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.932] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.936] RtlGetLastWin32Error () returned 0x3e5 [0172.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.936] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.946] RtlGetLastWin32Error () returned 0x3e5 [0172.946] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.978] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0172.981] RtlGetLastWin32Error () returned 0x3e5 [0172.981] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0172.981] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0172.989] RtlGetLastWin32Error () returned 0x3e5 [0172.989] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.021] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0173.023] RtlGetLastWin32Error () returned 0x3e5 [0173.023] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.024] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0173.035] RtlGetLastWin32Error () returned 0x3e5 [0173.035] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.079] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0173.082] RtlGetLastWin32Error () returned 0x3e5 [0173.083] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.083] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0173.093] RtlGetLastWin32Error () returned 0x3e5 [0173.093] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.148] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0173.153] RtlGetLastWin32Error () returned 0x3e5 [0173.153] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0173.153] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0173.168] RtlGetLastWin32Error () returned 0x3e5 [0173.168] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.258] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0174.261] RtlGetLastWin32Error () returned 0x3e5 [0174.261] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.261] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0174.271] RtlGetLastWin32Error () returned 0x3e5 [0174.271] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.327] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0174.332] RtlGetLastWin32Error () returned 0x3e5 [0174.332] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.332] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0174.342] RtlGetLastWin32Error () returned 0x3e5 [0174.342] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.391] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0174.395] RtlGetLastWin32Error () returned 0x3e5 [0174.395] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.395] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0174.404] RtlGetLastWin32Error () returned 0x3e5 [0174.404] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.446] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0174.453] RtlGetLastWin32Error () returned 0x3e5 [0174.453] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.453] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0174.468] RtlGetLastWin32Error () returned 0x3e5 [0174.468] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.515] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0174.517] RtlGetLastWin32Error () returned 0x3e5 [0174.517] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0174.518] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0174.526] RtlGetLastWin32Error () returned 0x3e5 [0174.526] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.166] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.169] RtlGetLastWin32Error () returned 0x3e5 [0176.169] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.169] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0176.179] RtlGetLastWin32Error () returned 0x3e5 [0176.179] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.214] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.217] RtlGetLastWin32Error () returned 0x3e5 [0176.217] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.217] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.226] RtlGetLastWin32Error () returned 0x3e5 [0176.226] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.261] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.264] RtlGetLastWin32Error () returned 0x3e5 [0176.264] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.264] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.274] RtlGetLastWin32Error () returned 0x3e5 [0176.274] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.321] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.324] RtlGetLastWin32Error () returned 0x3e5 [0176.324] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.324] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.334] RtlGetLastWin32Error () returned 0x3e5 [0176.334] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.425] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.428] RtlGetLastWin32Error () returned 0x3e5 [0176.428] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.428] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.436] RtlGetLastWin32Error () returned 0x3e5 [0176.436] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.485] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.487] RtlGetLastWin32Error () returned 0x3e5 [0176.488] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.488] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.495] RtlGetLastWin32Error () returned 0x3e5 [0176.495] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.519] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.521] RtlGetLastWin32Error () returned 0x3e5 [0176.522] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.522] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0176.529] RtlGetLastWin32Error () returned 0x3e5 [0176.529] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.560] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.563] RtlGetLastWin32Error () returned 0x3e5 [0176.563] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.563] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0176.573] RtlGetLastWin32Error () returned 0x3e5 [0176.573] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.612] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.615] RtlGetLastWin32Error () returned 0x3e5 [0176.615] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.615] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0176.625] RtlGetLastWin32Error () returned 0x3e5 [0176.625] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.663] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.666] RtlGetLastWin32Error () returned 0x3e5 [0176.666] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.666] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.675] RtlGetLastWin32Error () returned 0x3e5 [0176.675] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.709] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0176.712] RtlGetLastWin32Error () returned 0x3e5 [0176.712] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0176.712] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0176.722] RtlGetLastWin32Error () returned 0x3e5 [0176.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.114] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.131] RtlGetLastWin32Error () returned 0x3e5 [0177.132] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.132] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.141] RtlGetLastWin32Error () returned 0x3e5 [0177.141] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.218] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.221] RtlGetLastWin32Error () returned 0x3e5 [0177.221] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.221] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.230] RtlGetLastWin32Error () returned 0x3e5 [0177.230] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.269] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.272] RtlGetLastWin32Error () returned 0x3e5 [0177.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.272] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.280] RtlGetLastWin32Error () returned 0x3e5 [0177.280] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.346] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.349] RtlGetLastWin32Error () returned 0x3e5 [0177.349] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.349] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.358] RtlGetLastWin32Error () returned 0x3e5 [0177.358] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.577] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.579] RtlGetLastWin32Error () returned 0x3e5 [0177.579] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.579] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.586] RtlGetLastWin32Error () returned 0x3e5 [0177.586] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.646] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.649] RtlGetLastWin32Error () returned 0x3e5 [0177.649] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.649] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0177.657] RtlGetLastWin32Error () returned 0x3e5 [0177.657] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.717] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.722] RtlGetLastWin32Error () returned 0x3e5 [0177.722] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.722] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.734] RtlGetLastWin32Error () returned 0x3e5 [0177.734] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.778] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.781] RtlGetLastWin32Error () returned 0x3e5 [0177.781] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.781] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.790] RtlGetLastWin32Error () returned 0x3e5 [0177.790] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.839] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.849] RtlGetLastWin32Error () returned 0x3e5 [0177.849] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.849] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.866] RtlGetLastWin32Error () returned 0x3e5 [0177.866] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.900] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.913] RtlGetLastWin32Error () returned 0x3e5 [0177.913] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.913] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0177.927] RtlGetLastWin32Error () returned 0x3e5 [0177.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.955] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.958] RtlGetLastWin32Error () returned 0x3e5 [0177.958] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.958] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0177.968] RtlGetLastWin32Error () returned 0x3e5 [0177.968] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.995] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0177.997] RtlGetLastWin32Error () returned 0x3e5 [0177.997] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0177.998] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.006] RtlGetLastWin32Error () returned 0x3e5 [0178.006] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.036] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.039] RtlGetLastWin32Error () returned 0x3e5 [0178.039] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.039] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.048] RtlGetLastWin32Error () returned 0x3e5 [0178.048] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.078] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.081] RtlGetLastWin32Error () returned 0x3e5 [0178.081] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.081] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.091] RtlGetLastWin32Error () returned 0x3e5 [0178.091] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.117] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.120] RtlGetLastWin32Error () returned 0x3e5 [0178.120] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.120] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.138] RtlGetLastWin32Error () returned 0x3e5 [0178.138] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.169] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.172] RtlGetLastWin32Error () returned 0x3e5 [0178.172] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.172] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.180] RtlGetLastWin32Error () returned 0x3e5 [0178.180] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.209] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.212] RtlGetLastWin32Error () returned 0x3e5 [0178.212] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.212] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.223] RtlGetLastWin32Error () returned 0x3e5 [0178.223] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.252] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.256] RtlGetLastWin32Error () returned 0x3e5 [0178.256] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.256] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.265] RtlGetLastWin32Error () returned 0x3e5 [0178.265] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.295] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.298] RtlGetLastWin32Error () returned 0x3e5 [0178.298] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.299] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.311] RtlGetLastWin32Error () returned 0x3e5 [0178.311] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.342] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.345] RtlGetLastWin32Error () returned 0x3e5 [0178.345] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.345] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.355] RtlGetLastWin32Error () returned 0x3e5 [0178.355] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.381] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.384] RtlGetLastWin32Error () returned 0x3e5 [0178.384] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.385] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.394] RtlGetLastWin32Error () returned 0x3e5 [0178.394] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.434] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.437] RtlGetLastWin32Error () returned 0x3e5 [0178.437] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.437] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.447] RtlGetLastWin32Error () returned 0x3e5 [0178.447] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.482] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.485] RtlGetLastWin32Error () returned 0x3e5 [0178.485] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.485] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.495] RtlGetLastWin32Error () returned 0x3e5 [0178.495] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.526] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.529] RtlGetLastWin32Error () returned 0x3e5 [0178.529] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.529] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.539] RtlGetLastWin32Error () returned 0x3e5 [0178.539] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.569] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.572] RtlGetLastWin32Error () returned 0x3e5 [0178.572] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.572] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.582] RtlGetLastWin32Error () returned 0x3e5 [0178.582] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.612] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.616] RtlGetLastWin32Error () returned 0x3e5 [0178.616] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.616] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.627] RtlGetLastWin32Error () returned 0x3e5 [0178.627] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.653] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.680] RtlGetLastWin32Error () returned 0x3e5 [0178.680] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.680] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.690] RtlGetLastWin32Error () returned 0x3e5 [0178.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.725] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.728] RtlGetLastWin32Error () returned 0x3e5 [0178.728] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.729] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.738] RtlGetLastWin32Error () returned 0x3e5 [0178.738] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.771] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.774] RtlGetLastWin32Error () returned 0x3e5 [0178.774] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.774] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.784] RtlGetLastWin32Error () returned 0x3e5 [0178.785] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.851] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.855] RtlGetLastWin32Error () returned 0x3e5 [0178.855] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.855] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.865] RtlGetLastWin32Error () returned 0x3e5 [0178.865] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.894] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.897] RtlGetLastWin32Error () returned 0x3e5 [0178.897] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.897] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.905] RtlGetLastWin32Error () returned 0x3e5 [0178.905] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.933] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.936] RtlGetLastWin32Error () returned 0x3e5 [0178.936] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.936] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0178.945] RtlGetLastWin32Error () returned 0x3e5 [0178.945] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.974] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0178.977] RtlGetLastWin32Error () returned 0x3e5 [0178.977] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0178.977] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0178.987] RtlGetLastWin32Error () returned 0x3e5 [0178.987] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.020] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.023] RtlGetLastWin32Error () returned 0x3e5 [0179.023] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.023] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0179.035] RtlGetLastWin32Error () returned 0x3e5 [0179.035] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.066] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.069] RtlGetLastWin32Error () returned 0x3e5 [0179.069] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.069] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0179.078] RtlGetLastWin32Error () returned 0x3e5 [0179.078] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.107] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.109] RtlGetLastWin32Error () returned 0x3e5 [0179.109] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.109] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0179.117] RtlGetLastWin32Error () returned 0x3e5 [0179.117] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.161] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x100000, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.163] RtlGetLastWin32Error () returned 0x3e5 [0179.164] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.164] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0179.171] RtlGetLastWin32Error () returned 0x3e5 [0179.171] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.265] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f7417c*, nNumberOfBytesToWrite=0x68298, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.266] RtlGetLastWin32Error () returned 0x3e5 [0179.266] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.271] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 0x0 [0179.272] RtlGetLastWin32Error () returned 0x3e5 [0179.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 0 [0179.272] RtlGetLastWin32Error () returned 0x26 [0179.272] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3f74020) returned 1 [0179.272] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.272] WriteFile (in: hFile=0x3cc, lpBuffer=0x3f74048*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f74048*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3f74020) returned 1 [0179.273] RtlGetLastWin32Error () returned 0x3e5 [0179.273] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 [0179.273] CloseHandle (hObject=0x3cc) returned 1 [0179.665] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xc6) returned 0x1183648 [0179.665] MoveFileW (lpExistingFileName="\\\\?\\c:\\recovery\\windowsre\\Winre.wim" (normalized: "c:\\recovery\\windowsre\\winre.wim"), lpNewFileName="\\\\?\\c:\\recovery\\windowsre\\Winre.wim.1yg4ztc5" (normalized: "c:\\recovery\\windowsre\\winre.wim.1yg4ztc5")) returned 0 [0179.665] RtlGetLastWin32Error () returned 0x5 [0179.665] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183788) returned 1 [0179.665] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0179.666] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3f74020) returned 1 [0179.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3ddff78, lpCompletionKey=0x3ddff74, lpOverlapped=0x3ddff7c) returned 1 Thread: id = 141 os_tid = 0x127c [0114.118] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0114.118] CoCreateInstance (in: rclsid=0x96e158*(Data1=0x674b6698, Data2=0xee92, Data3=0x11d0, Data4=([0]=0xad, [1]=0x71, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x96e148*(Data1=0x44aca674, Data2=0xe8fc, Data3=0x11d0, Data4=([0]=0xa0, [1]=0x7c, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x361ff74 | out: ppv=0x361ff74*=0x4d7c18) returned 0x0 [0114.119] GetNativeSystemInfo (in: lpSystemInfo=0x361fd84 | out: lpSystemInfo=0x361fd84*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5507)) [0114.119] WbemContext:IWbemContext:SetValue (This=0x4d7c18, wszName="__ProviderArchitecture", lFlags=0, pValue=0x361ff58*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0)) returned 0x0 [0114.119] CoCreateInstance (in: rclsid=0x96e168*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x4401, riid=0x96e188*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x361ff68 | out: ppv=0x361ff68*=0x4ed9d8) returned 0x0 [0114.119] WbemLocator:IWbemLocator:ConnectServer (in: This=0x4ed9d8, strNetworkResource="ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale=0x0, lSecurityFlags=0, strAuthority=0x0, pCtx=0x4d7c18, ppNamespace=0x361ff78 | out: ppNamespace=0x361ff78*=0x4bbbd0) returned 0x0 [0115.247] CoSetProxyBlanket (pProxy=0x4bbbd0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x3, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0115.247] IWbemServices:ExecQuery (in: This=0x4bbbd0, strQueryLanguage="WQL", strQuery="select * from Win32_ShadowCopy", lFlags=48, pCtx=0x0, ppEnum=0x361ff70 | out: ppEnum=0x361ff70*=0x4f2208) returned 0x0 [0115.250] IEnumWbemClassObject:Next (in: This=0x4f2208, lTimeout=-1, uCount=0x1, apObjects=0x361ff6c, puReturned=0x361ff7c | out: apObjects=0x361ff6c*=0x0, puReturned=0x361ff7c*=0x0) returned 0x80041014 [0118.775] WbemLocator:IUnknown:Release (This=0x4ed9d8) returned 0x0 [0118.775] CoUninitialize () Thread: id = 142 os_tid = 0x1368 [0114.123] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.844] ReadFile (in: hFile=0x3b8, lpBuffer=0x3b495fc, nNumberOfBytesToRead=0x61b64, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b494a0 | out: lpBuffer=0x3b495fc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b494a0) returned 1 [0123.844] RtlGetLastWin32Error () returned 0x3e5 [0123.845] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.848] ReadFile (in: hFile=0x3c0, lpBuffer=0x3bc8704, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc85a8 | out: lpBuffer=0x3bc8704*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc85a8) returned 1 [0123.848] RtlGetLastWin32Error () returned 0x3e5 [0123.848] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.910] ReadFile (in: hFile=0x3c8, lpBuffer=0x3e6d17c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020 | out: lpBuffer=0x3e6d17c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3e6d020) returned 1 [0123.921] RtlGetLastWin32Error () returned 0x3e5 [0123.921] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.927] ReadFile (in: hFile=0x3cc, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x415, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0123.927] RtlGetLastWin32Error () returned 0x3e5 [0123.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.927] WriteFile (in: hFile=0x3cc, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x415, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0123.927] RtlGetLastWin32Error () returned 0x3e5 [0123.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.928] ReadFile (in: hFile=0x3cc, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x415, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0123.928] RtlGetLastWin32Error () returned 0x3e5 [0123.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0123.928] RtlGetLastWin32Error () returned 0x26 [0123.928] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0123.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.928] WriteFile (in: hFile=0x3cc, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0123.928] RtlGetLastWin32Error () returned 0x3e5 [0123.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0123.928] CloseHandle (hObject=0x3cc) returned 1 [0123.932] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xca) returned 0x11837e0 [0123.933] MoveFileW (lpExistingFileName="\\\\?\\c:\\recovery\\windowsre\\ReAgent.xml" (normalized: "c:\\recovery\\windowsre\\reagent.xml"), lpNewFileName="\\\\?\\c:\\recovery\\windowsre\\ReAgent.xml.1yg4ztc5" (normalized: "c:\\recovery\\windowsre\\reagent.xml.1yg4ztc5")) returned 1 [0123.994] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183788) returned 1 [0123.994] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837e0) returned 1 [0123.994] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0123.994] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.009] ReadFile (in: hFile=0x3cc, lpBuffer=0x3f7417c, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020 | out: lpBuffer=0x3f7417c*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3f74020) returned 1 [0124.020] RtlGetLastWin32Error () returned 0x3e5 [0124.020] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.226] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x3e7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.226] RtlGetLastWin32Error () returned 0x3e5 [0124.226] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.226] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x3e7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.227] RtlGetLastWin32Error () returned 0x3e5 [0124.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.227] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x3e7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.227] RtlGetLastWin32Error () returned 0x3e5 [0124.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.227] RtlGetLastWin32Error () returned 0x26 [0124.228] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.228] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.228] RtlGetLastWin32Error () returned 0x3e5 [0124.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.228] CloseHandle (hObject=0x3d0) returned 1 [0124.236] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x11837d8 [0124.236] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\public\\libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="\\\\?\\c:\\users\\public\\libraries\\RecordedTV.library-ms.1yg4ztc5" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.1yg4ztc5")) returned 1 [0124.237] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.237] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.237] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.237] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.288] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x152ef, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.289] RtlGetLastWin32Error () returned 0x3e5 [0124.289] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.290] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x152ef, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.291] RtlGetLastWin32Error () returned 0x3e5 [0124.291] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.291] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x152ef, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.292] RtlGetLastWin32Error () returned 0x3e5 [0124.292] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.292] RtlGetLastWin32Error () returned 0x26 [0124.292] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.292] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.292] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.292] RtlGetLastWin32Error () returned 0x3e5 [0124.292] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.292] CloseHandle (hObject=0x3d0) returned 1 [0124.299] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x11837d8 [0124.299] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\-Z-V0ExGeBpI5TSR.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-z-v0exgebpi5tsr.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\-Z-V0ExGeBpI5TSR.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-z-v0exgebpi5tsr.swf.1yg4ztc5")) returned 1 [0124.300] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.300] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.301] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.317] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.322] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x5542, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.322] RtlGetLastWin32Error () returned 0x3e5 [0124.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.322] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x5542, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.323] RtlGetLastWin32Error () returned 0x3e5 [0124.323] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.323] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x5542, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.323] RtlGetLastWin32Error () returned 0x3e5 [0124.323] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.323] RtlGetLastWin32Error () returned 0x26 [0124.323] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.323] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.323] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.324] RtlGetLastWin32Error () returned 0x3e5 [0124.324] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.324] CloseHandle (hObject=0x3d0) returned 1 [0124.328] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x11837d8 [0124.329] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\01YAMgo9xg6KO6O.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\01yamgo9xg6ko6o.mkv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\01YAMgo9xg6KO6O.mkv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\01yamgo9xg6ko6o.mkv.1yg4ztc5")) returned 1 [0124.329] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.329] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.329] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.330] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.334] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7f2f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.334] RtlGetLastWin32Error () returned 0x3e5 [0124.334] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.334] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x7f2f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.335] RtlGetLastWin32Error () returned 0x3e5 [0124.335] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.335] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x7f2f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.335] RtlGetLastWin32Error () returned 0x3e5 [0124.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.336] RtlGetLastWin32Error () returned 0x26 [0124.336] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.336] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.336] RtlGetLastWin32Error () returned 0x3e5 [0124.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.336] CloseHandle (hObject=0x3d0) returned 1 [0124.339] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd4) returned 0x11837d8 [0124.339] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\1 UW.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\1 uw.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\1 UW.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\1 uw.wav.1yg4ztc5")) returned 1 [0124.340] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.340] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.340] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.342] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.347] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x123ca, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.348] RtlGetLastWin32Error () returned 0x3e5 [0124.348] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.349] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x123ca, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.351] RtlGetLastWin32Error () returned 0x3e5 [0124.352] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.352] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x123ca, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.352] RtlGetLastWin32Error () returned 0x3e5 [0124.352] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.352] RtlGetLastWin32Error () returned 0x26 [0124.352] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.352] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.352] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.353] RtlGetLastWin32Error () returned 0x3e5 [0124.353] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.353] CloseHandle (hObject=0x3d0) returned 1 [0124.358] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x11837d8 [0124.358] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\33awWl-CR.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\33awwl-cr.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\33awWl-CR.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\33awwl-cr.avi.1yg4ztc5")) returned 1 [0124.359] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.359] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.359] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.360] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.364] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdeeb, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.365] RtlGetLastWin32Error () returned 0x3e5 [0124.365] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.366] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xdeeb, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.367] RtlGetLastWin32Error () returned 0x3e5 [0124.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.367] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdeeb, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.367] RtlGetLastWin32Error () returned 0x3e5 [0124.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.367] RtlGetLastWin32Error () returned 0x26 [0124.367] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.367] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.368] RtlGetLastWin32Error () returned 0x3e5 [0124.368] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.368] CloseHandle (hObject=0x3d0) returned 1 [0124.373] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x11837d8 [0124.373] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\6ln5Q1NpLV8X.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\6ln5q1nplv8x.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\6ln5Q1NpLV8X.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\6ln5q1nplv8x.swf.1yg4ztc5")) returned 1 [0124.374] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.374] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.374] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.374] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.378] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10465, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.378] RtlGetLastWin32Error () returned 0x3e5 [0124.378] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.379] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10465, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.380] RtlGetLastWin32Error () returned 0x3e5 [0124.380] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.380] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10465, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.380] RtlGetLastWin32Error () returned 0x3e5 [0124.380] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.380] RtlGetLastWin32Error () returned 0x26 [0124.380] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.380] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.380] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.381] RtlGetLastWin32Error () returned 0x3e5 [0124.381] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.381] CloseHandle (hObject=0x3d0) returned 1 [0124.384] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xdc) returned 0x11837d8 [0124.384] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\8gunvOc6.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\8gunvoc6.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\8gunvOc6.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\8gunvoc6.avi.1yg4ztc5")) returned 1 [0124.385] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.385] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.385] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.386] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.389] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x84a8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.389] RtlGetLastWin32Error () returned 0x3e5 [0124.389] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.389] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x84a8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.390] RtlGetLastWin32Error () returned 0x3e5 [0124.390] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.390] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x84a8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.390] RtlGetLastWin32Error () returned 0x3e5 [0124.390] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.390] RtlGetLastWin32Error () returned 0x26 [0124.390] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.390] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.390] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.391] RtlGetLastWin32Error () returned 0x3e5 [0124.391] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.391] CloseHandle (hObject=0x3d0) returned 1 [0124.397] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x11837d8 [0124.397] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\AJEpb8eU1fWd.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ajepb8eu1fwd.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\AJEpb8eU1fWd.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ajepb8eu1fwd.wav.1yg4ztc5")) returned 1 [0124.398] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.398] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.398] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.399] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.406] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12630, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.407] RtlGetLastWin32Error () returned 0x3e5 [0124.407] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.407] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x12630, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.409] RtlGetLastWin32Error () returned 0x3e5 [0124.409] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.409] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x12630, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.409] RtlGetLastWin32Error () returned 0x3e5 [0124.409] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.409] RtlGetLastWin32Error () returned 0x26 [0124.409] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.409] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.409] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.410] RtlGetLastWin32Error () returned 0x3e5 [0124.410] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.410] CloseHandle (hObject=0x3d0) returned 1 [0124.420] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x11837d8 [0124.420] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\B snKe5YsxqO.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\b snke5ysxqo.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\B snKe5YsxqO.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\b snke5ysxqo.mp4.1yg4ztc5")) returned 1 [0124.421] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183648) returned 1 [0124.421] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.421] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.422] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.447] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1552c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.448] RtlGetLastWin32Error () returned 0x3e5 [0124.448] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.448] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1552c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.450] RtlGetLastWin32Error () returned 0x3e5 [0124.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.450] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1552c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.450] RtlGetLastWin32Error () returned 0x3e5 [0124.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.450] RtlGetLastWin32Error () returned 0x26 [0124.450] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.450] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.450] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.451] RtlGetLastWin32Error () returned 0x3e5 [0124.451] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.451] CloseHandle (hObject=0x3d0) returned 1 [0124.461] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x11837d8 [0124.462] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\BZGdF1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bzgdf1.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\BZGdF1.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bzgdf1.gif.1yg4ztc5")) returned 1 [0124.463] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.463] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.463] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.464] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.469] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x794d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.470] RtlGetLastWin32Error () returned 0x3e5 [0124.470] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.470] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x794d, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.471] RtlGetLastWin32Error () returned 0x3e5 [0124.471] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.471] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x794d, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.471] RtlGetLastWin32Error () returned 0x3e5 [0124.471] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.472] RtlGetLastWin32Error () returned 0x26 [0124.472] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.472] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.472] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.472] RtlGetLastWin32Error () returned 0x3e5 [0124.472] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.472] CloseHandle (hObject=0x3d0) returned 1 [0124.478] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf4) returned 0x11837d8 [0124.478] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\cmuFOUIVnjG4az4rOtOY.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cmufouivnjg4az4rotoy.mkv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\cmuFOUIVnjG4az4rOtOY.mkv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cmufouivnjg4az4rotoy.mkv.1yg4ztc5")) returned 1 [0124.479] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.479] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.479] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.480] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.487] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10cb0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.488] RtlGetLastWin32Error () returned 0x3e5 [0124.488] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.488] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10cb0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.489] RtlGetLastWin32Error () returned 0x3e5 [0124.489] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.490] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10cb0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.490] RtlGetLastWin32Error () returned 0x3e5 [0124.490] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.490] RtlGetLastWin32Error () returned 0x26 [0124.490] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.490] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.490] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.490] RtlGetLastWin32Error () returned 0x3e5 [0124.490] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.491] CloseHandle (hObject=0x3d0) returned 1 [0124.497] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe0) returned 0x11837d8 [0124.497] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Cva PS2HA_.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cva ps2ha_.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Cva PS2HA_.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\cva ps2ha_.m4a.1yg4ztc5")) returned 1 [0124.498] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.498] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.498] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.499] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.506] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x137e6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.507] RtlGetLastWin32Error () returned 0x3e5 [0124.507] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.507] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x137e6, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.509] RtlGetLastWin32Error () returned 0x3e5 [0124.509] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.509] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x137e6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.509] RtlGetLastWin32Error () returned 0x3e5 [0124.509] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.509] RtlGetLastWin32Error () returned 0x26 [0124.509] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.509] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.509] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.510] RtlGetLastWin32Error () returned 0x3e5 [0124.510] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.510] CloseHandle (hObject=0x3d0) returned 1 [0124.516] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xda) returned 0x11837d8 [0124.517] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\dgDGWB.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\dgdgwb.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\dgDGWB.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\dgdgwb.docx.1yg4ztc5")) returned 1 [0124.518] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.518] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.518] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.519] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.526] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14627, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.527] RtlGetLastWin32Error () returned 0x3e5 [0124.527] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.528] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14627, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.529] RtlGetLastWin32Error () returned 0x3e5 [0124.529] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.529] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14627, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.529] RtlGetLastWin32Error () returned 0x3e5 [0124.532] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.532] RtlGetLastWin32Error () returned 0x26 [0124.532] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.532] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.532] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.532] RtlGetLastWin32Error () returned 0x3e5 [0124.532] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.532] CloseHandle (hObject=0x3d0) returned 1 [0124.535] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x11837d8 [0124.535] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\eMPya.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\empya.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\eMPya.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\empya.xlsx.1yg4ztc5")) returned 1 [0124.536] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.536] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.536] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.537] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.543] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x4adc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.544] RtlGetLastWin32Error () returned 0x3e5 [0124.544] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.544] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x4adc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.545] RtlGetLastWin32Error () returned 0x3e5 [0124.545] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.545] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x4adc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.545] RtlGetLastWin32Error () returned 0x3e5 [0124.545] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.545] RtlGetLastWin32Error () returned 0x26 [0124.545] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.545] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.545] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.546] RtlGetLastWin32Error () returned 0x3e5 [0124.546] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.546] CloseHandle (hObject=0x3d0) returned 1 [0124.547] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x11837d8 [0124.547] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\FJejnU-5I.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fjejnu-5i.pdf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\FJejnU-5I.pdf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fjejnu-5i.pdf.1yg4ztc5")) returned 1 [0124.548] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.548] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.548] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.549] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.552] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x5b2e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.552] RtlGetLastWin32Error () returned 0x3e5 [0124.552] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.552] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x5b2e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.553] RtlGetLastWin32Error () returned 0x3e5 [0124.553] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.553] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x5b2e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.553] RtlGetLastWin32Error () returned 0x3e5 [0124.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.554] RtlGetLastWin32Error () returned 0x26 [0124.554] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.554] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.554] RtlGetLastWin32Error () returned 0x3e5 [0124.554] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.554] CloseHandle (hObject=0x3d0) returned 1 [0124.556] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x11837d8 [0124.556] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\fn8P6 hgNkusN.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fn8p6 hgnkusn.doc"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\fn8P6 hgNkusN.doc.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fn8p6 hgnkusn.doc.1yg4ztc5")) returned 1 [0124.557] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.557] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.557] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.557] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.561] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x63bf, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.561] RtlGetLastWin32Error () returned 0x3e5 [0124.561] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.561] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x63bf, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.562] RtlGetLastWin32Error () returned 0x3e5 [0124.562] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.562] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x63bf, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.562] RtlGetLastWin32Error () returned 0x3e5 [0124.562] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.562] RtlGetLastWin32Error () returned 0x26 [0124.562] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.562] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.562] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.563] RtlGetLastWin32Error () returned 0x3e5 [0124.563] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.563] CloseHandle (hObject=0x3d0) returned 1 [0124.564] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x11837d8 [0124.564] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Fvhx_vxdy.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fvhx_vxdy.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Fvhx_vxdy.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fvhx_vxdy.wav.1yg4ztc5")) returned 1 [0124.565] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.565] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.565] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.565] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.569] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa151, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.569] RtlGetLastWin32Error () returned 0x3e5 [0124.569] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.570] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xa151, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.570] RtlGetLastWin32Error () returned 0x3e5 [0124.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.571] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa151, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.571] RtlGetLastWin32Error () returned 0x3e5 [0124.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.571] RtlGetLastWin32Error () returned 0x26 [0124.571] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.571] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.571] RtlGetLastWin32Error () returned 0x3e5 [0124.571] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.571] CloseHandle (hObject=0x3d0) returned 1 [0124.576] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe0) returned 0x11837d8 [0124.577] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\ImpY3itno4.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\impy3itno4.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\ImpY3itno4.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\impy3itno4.bmp.1yg4ztc5")) returned 1 [0124.577] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.577] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.577] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.578] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.582] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbc6f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.582] RtlGetLastWin32Error () returned 0x3e5 [0124.583] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.583] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xbc6f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.584] RtlGetLastWin32Error () returned 0x3e5 [0124.584] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.584] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbc6f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.584] RtlGetLastWin32Error () returned 0x3e5 [0124.584] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.584] RtlGetLastWin32Error () returned 0x26 [0124.584] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.584] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.584] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.584] RtlGetLastWin32Error () returned 0x3e5 [0124.585] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.585] CloseHandle (hObject=0x3d0) returned 1 [0124.587] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd4) returned 0x11837d8 [0124.587] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\IUm_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ium_.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\IUm_.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ium_.bmp.1yg4ztc5")) returned 1 [0124.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.588] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.588] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.589] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.595] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x656b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.595] RtlGetLastWin32Error () returned 0x3e5 [0124.595] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.595] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x656b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.596] RtlGetLastWin32Error () returned 0x3e5 [0124.596] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.596] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x656b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.596] RtlGetLastWin32Error () returned 0x3e5 [0124.596] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.597] RtlGetLastWin32Error () returned 0x26 [0124.597] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.597] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.597] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.597] RtlGetLastWin32Error () returned 0x3e5 [0124.597] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.597] CloseHandle (hObject=0x3d0) returned 1 [0124.599] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x11837d8 [0124.599] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\JWX47syN3PWU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\jwx47syn3pwu.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\JWX47syN3PWU.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\jwx47syn3pwu.bmp.1yg4ztc5")) returned 1 [0124.600] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.600] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.600] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.600] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.608] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x13ba9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.608] RtlGetLastWin32Error () returned 0x3e5 [0124.608] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.609] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x13ba9, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.610] RtlGetLastWin32Error () returned 0x3e5 [0124.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.611] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x13ba9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.611] RtlGetLastWin32Error () returned 0x3e5 [0124.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.611] RtlGetLastWin32Error () returned 0x26 [0124.611] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.611] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.611] RtlGetLastWin32Error () returned 0x3e5 [0124.611] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.612] CloseHandle (hObject=0x3d0) returned 1 [0124.614] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x11837d8 [0124.614] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\LYqznbAEVzwqX45oeA.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lyqznbaevzwqx45oea.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\LYqznbAEVzwqX45oeA.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\lyqznbaevzwqx45oea.mp4.1yg4ztc5")) returned 1 [0124.615] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.615] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.615] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.617] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.620] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa38c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.621] RtlGetLastWin32Error () returned 0x3e5 [0124.621] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.621] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xa38c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.622] RtlGetLastWin32Error () returned 0x3e5 [0124.622] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.622] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa38c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.622] RtlGetLastWin32Error () returned 0x3e5 [0124.622] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.622] RtlGetLastWin32Error () returned 0x26 [0124.622] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.622] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.622] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.623] RtlGetLastWin32Error () returned 0x3e5 [0124.623] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.623] CloseHandle (hObject=0x3d0) returned 1 [0124.628] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd4) returned 0x11837d8 [0124.628] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\O2CR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\o2cr.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\O2CR.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\o2cr.bmp.1yg4ztc5")) returned 1 [0124.629] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.629] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.630] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.630] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.635] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x426e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.635] RtlGetLastWin32Error () returned 0x3e5 [0124.635] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.635] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x426e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.635] RtlGetLastWin32Error () returned 0x3e5 [0124.635] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.636] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x426e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.636] RtlGetLastWin32Error () returned 0x3e5 [0124.636] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.636] RtlGetLastWin32Error () returned 0x26 [0124.636] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.636] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.636] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.636] RtlGetLastWin32Error () returned 0x3e5 [0124.636] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.636] CloseHandle (hObject=0x3d0) returned 1 [0124.641] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x11837d8 [0124.641] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Od9_u.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\od9_u.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Od9_u.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\od9_u.xlsx.1yg4ztc5")) returned 1 [0124.641] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836a8) returned 1 [0124.641] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.641] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.641] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.649] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x909e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.649] RtlGetLastWin32Error () returned 0x3e5 [0124.649] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.649] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x909e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.650] RtlGetLastWin32Error () returned 0x3e5 [0124.650] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.650] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x909e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.650] RtlGetLastWin32Error () returned 0x3e5 [0124.650] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.650] RtlGetLastWin32Error () returned 0x26 [0124.650] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.651] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.651] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.651] RtlGetLastWin32Error () returned 0x3e5 [0124.651] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.651] CloseHandle (hObject=0x3d0) returned 1 [0124.665] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x1183840 [0124.665] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qgErEk.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qgerek.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qgErEk.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qgerek.avi.1yg4ztc5")) returned 1 [0124.678] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.678] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183840) returned 1 [0124.678] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.678] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.679] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1aa6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.679] RtlGetLastWin32Error () returned 0x3e5 [0124.679] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.684] RtlGetLastWin32Error () returned 0x26 [0124.684] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.684] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.684] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.684] RtlGetLastWin32Error () returned 0x3e5 [0124.684] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.684] CloseHandle (hObject=0x3d4) returned 1 [0124.693] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x11837d8 [0124.693] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qzaVN1YR5.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzavn1yr5.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\qzaVN1YR5.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzavn1yr5.png.1yg4ztc5")) returned 1 [0124.694] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0124.694] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.694] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.712] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.728] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10435, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.728] RtlGetLastWin32Error () returned 0x3e5 [0124.728] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.729] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10435, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.737] RtlGetLastWin32Error () returned 0x3e5 [0124.737] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.738] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10435, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.738] RtlGetLastWin32Error () returned 0x3e5 [0124.738] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.738] RtlGetLastWin32Error () returned 0x26 [0124.738] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.738] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.738] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.738] RtlGetLastWin32Error () returned 0x3e5 [0124.738] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.739] CloseHandle (hObject=0x3d4) returned 1 [0124.753] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183850 [0124.753] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\QzpxI33e01yGBOLeX.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzpxi33e01ygbolex.mkv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\QzpxI33e01yGBOLeX.mkv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\qzpxi33e01ygbolex.mkv.1yg4ztc5")) returned 1 [0124.755] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.755] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0124.755] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.760] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.796] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x148a1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.797] RtlGetLastWin32Error () returned 0x3e5 [0124.797] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.797] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x148a1, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.799] RtlGetLastWin32Error () returned 0x3e5 [0124.799] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.799] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x148a1, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.799] RtlGetLastWin32Error () returned 0x3e5 [0124.800] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.800] RtlGetLastWin32Error () returned 0x26 [0124.800] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.800] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.800] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.800] RtlGetLastWin32Error () returned 0x3e5 [0124.800] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.800] CloseHandle (hObject=0x3d4) returned 1 [0124.804] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183850 [0124.804] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Rb_JLSd1jDdcCtXSZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\rb_jlsd1jddcctxsz.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\Rb_JLSd1jDdcCtXSZ.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\rb_jlsd1jddcctxsz.gif.1yg4ztc5")) returned 1 [0124.805] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.805] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0124.805] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.806] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.811] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1852, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.811] RtlGetLastWin32Error () returned 0x3e5 [0124.811] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.812] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x1852, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.812] RtlGetLastWin32Error () returned 0x3e5 [0124.812] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.812] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1852, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.812] RtlGetLastWin32Error () returned 0x3e5 [0124.812] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.813] RtlGetLastWin32Error () returned 0x26 [0124.813] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.813] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.813] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.813] RtlGetLastWin32Error () returned 0x3e5 [0124.813] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.813] CloseHandle (hObject=0x3d4) returned 1 [0124.816] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x1183848 [0124.817] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\y1Mi2Ynx_elk.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\y1mi2ynx_elk.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\y1Mi2Ynx_elk.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\y1mi2ynx_elk.mp3.1yg4ztc5")) returned 1 [0124.817] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.817] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0124.818] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.818] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.822] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x140c7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.823] RtlGetLastWin32Error () returned 0x3e5 [0124.823] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.824] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x140c7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.825] RtlGetLastWin32Error () returned 0x3e5 [0124.825] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.825] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x140c7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.825] RtlGetLastWin32Error () returned 0x3e5 [0124.825] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.825] RtlGetLastWin32Error () returned 0x26 [0124.825] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.825] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.826] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.826] RtlGetLastWin32Error () returned 0x3e5 [0124.826] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.826] CloseHandle (hObject=0x3d4) returned 1 [0124.834] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183850 [0124.834] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\yKVRq4UJhors0kzj.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ykvrq4ujhors0kzj.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\yKVRq4UJhors0kzj.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ykvrq4ujhors0kzj.gif.1yg4ztc5")) returned 1 [0124.848] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.848] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0124.848] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.849] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.855] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18752, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.856] RtlGetLastWin32Error () returned 0x3e5 [0124.856] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.857] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x18752, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.859] RtlGetLastWin32Error () returned 0x3e5 [0124.859] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.859] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18752, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.859] RtlGetLastWin32Error () returned 0x3e5 [0124.859] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.859] RtlGetLastWin32Error () returned 0x26 [0124.859] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.859] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.860] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.860] RtlGetLastWin32Error () returned 0x3e5 [0124.860] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.860] CloseHandle (hObject=0x3d4) returned 1 [0124.864] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183850 [0124.864] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_HZf8VI--lGsLJmGS.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_hzf8vi--lgsljmgs.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_HZf8VI--lGsLJmGS.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_hzf8vi--lgsljmgs.jpg.1yg4ztc5")) returned 1 [0124.865] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.865] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0124.865] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.866] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.872] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfafc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.873] RtlGetLastWin32Error () returned 0x3e5 [0124.873] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.874] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xfafc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.875] RtlGetLastWin32Error () returned 0x3e5 [0124.875] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.875] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfafc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.875] RtlGetLastWin32Error () returned 0x3e5 [0124.875] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.875] RtlGetLastWin32Error () returned 0x26 [0124.875] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.875] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.875] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.876] RtlGetLastWin32Error () returned 0x3e5 [0124.876] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.876] CloseHandle (hObject=0x3d4) returned 1 [0124.881] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe2) returned 0x1183848 [0124.881] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9R7840.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9r7840.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9R7840.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\_vijf9r7840.bmp.1yg4ztc5")) returned 1 [0124.882] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.882] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0124.882] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.883] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.891] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd611, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.891] RtlGetLastWin32Error () returned 0x3e5 [0124.891] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.892] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xd611, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.893] RtlGetLastWin32Error () returned 0x3e5 [0124.893] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.893] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd611, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.893] RtlGetLastWin32Error () returned 0x3e5 [0124.893] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.893] RtlGetLastWin32Error () returned 0x26 [0124.893] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.894] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.894] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.894] RtlGetLastWin32Error () returned 0x3e5 [0124.894] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.894] CloseHandle (hObject=0x3d4) returned 1 [0124.902] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x1183840 [0124.902] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\-DN qa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-dn qa.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\-DN qa.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\-dn qa.docx.1yg4ztc5")) returned 1 [0124.903] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.903] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183840) returned 1 [0124.903] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.904] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.914] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x40df, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.914] RtlGetLastWin32Error () returned 0x3e5 [0124.914] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.914] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x40df, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.915] RtlGetLastWin32Error () returned 0x3e5 [0124.915] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.915] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x40df, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0124.915] RtlGetLastWin32Error () returned 0x3e5 [0124.915] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.916] RtlGetLastWin32Error () returned 0x26 [0124.916] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.916] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.916] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0124.916] RtlGetLastWin32Error () returned 0x3e5 [0124.916] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.916] CloseHandle (hObject=0x3d4) returned 1 [0124.918] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf8) returned 0x1183860 [0124.918] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\0f0dtE0zrFDiBuhWyC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\0f0dte0zrfdibuhwyc5.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\0f0dtE0zrFDiBuhWyC5.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\0f0dte0zrfdibuhwyc5.docx.1yg4ztc5")) returned 1 [0124.919] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.919] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0124.919] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0124.920] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.924] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb9e4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.925] RtlGetLastWin32Error () returned 0x3e5 [0124.925] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.926] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb9e4, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.926] RtlGetLastWin32Error () returned 0x3e5 [0124.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.927] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb9e4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.927] RtlGetLastWin32Error () returned 0x3e5 [0124.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.927] RtlGetLastWin32Error () returned 0x26 [0124.927] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.927] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.927] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.927] RtlGetLastWin32Error () returned 0x3e5 [0124.928] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.928] CloseHandle (hObject=0x3d4) returned 1 [0124.932] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf6) returned 0x1183858 [0124.933] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\3kI5HqhForfqaGGgxr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ki5hqhforfqagggxr.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\3kI5HqhForfqaGGgxr.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\3ki5hqhforfqagggxr.xlsx.1yg4ztc5")) returned 1 [0124.934] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0124.934] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183858) returned 1 [0124.934] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0124.935] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.940] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb46f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0124.991] RtlGetLastWin32Error () returned 0x3e5 [0124.991] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.992] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb46f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.993] RtlGetLastWin32Error () returned 0x3e5 [0124.993] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.993] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb46f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0124.993] RtlGetLastWin32Error () returned 0x3e5 [0124.993] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0124.993] RtlGetLastWin32Error () returned 0x26 [0124.993] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0124.993] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.993] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0124.994] RtlGetLastWin32Error () returned 0x3e5 [0124.994] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0124.994] CloseHandle (hObject=0x3d4) returned 1 [0124.999] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x1183858 [0124.999] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\400IjG TRfjGKkG.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\400ijg trfjgkkg.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\400IjG TRfjGKkG.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\400ijg trfjgkkg.docx.1yg4ztc5")) returned 1 [0125.000] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.000] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183858) returned 1 [0125.000] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.001] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.008] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9403, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.008] RtlGetLastWin32Error () returned 0x3e5 [0125.008] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.009] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x9403, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.010] RtlGetLastWin32Error () returned 0x3e5 [0125.010] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.010] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9403, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.010] RtlGetLastWin32Error () returned 0x3e5 [0125.010] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.010] RtlGetLastWin32Error () returned 0x26 [0125.010] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.010] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.010] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.011] RtlGetLastWin32Error () returned 0x3e5 [0125.011] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.011] CloseHandle (hObject=0x3d4) returned 1 [0125.014] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183850 [0125.015] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\5ujftJ9fpTg1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5ujftj9fptg1.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\5ujftJ9fpTg1.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\5ujftj9fptg1.docx.1yg4ztc5")) returned 1 [0125.015] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.015] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0125.016] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.016] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.021] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb846, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.021] RtlGetLastWin32Error () returned 0x3e5 [0125.022] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.022] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb846, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.023] RtlGetLastWin32Error () returned 0x3e5 [0125.023] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.023] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb846, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.023] RtlGetLastWin32Error () returned 0x3e5 [0125.023] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.024] RtlGetLastWin32Error () returned 0x26 [0125.024] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.024] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.024] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.024] RtlGetLastWin32Error () returned 0x3e5 [0125.024] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.024] CloseHandle (hObject=0x3d4) returned 1 [0125.028] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe0) returned 0x1183848 [0125.029] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\6zXJIpa.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\6zxjipa.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\6zXJIpa.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\6zxjipa.pptx.1yg4ztc5")) returned 1 [0125.030] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.030] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.030] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.031] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.037] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17357, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.037] RtlGetLastWin32Error () returned 0x3e5 [0125.038] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.039] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x17357, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.040] RtlGetLastWin32Error () returned 0x3e5 [0125.040] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.041] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x17357, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.041] RtlGetLastWin32Error () returned 0x3e5 [0125.041] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.041] RtlGetLastWin32Error () returned 0x26 [0125.041] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.041] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.041] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.041] RtlGetLastWin32Error () returned 0x3e5 [0125.041] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.041] CloseHandle (hObject=0x3d4) returned 1 [0125.045] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe2) returned 0x1183848 [0125.045] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\bxJv6_JJ.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bxjv6_jj.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\bxJv6_JJ.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\bxjv6_jj.xlsx.1yg4ztc5")) returned 1 [0125.046] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.046] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.046] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.047] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.052] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x228b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.052] RtlGetLastWin32Error () returned 0x3e5 [0125.052] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.052] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x228b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.053] RtlGetLastWin32Error () returned 0x3e5 [0125.053] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.053] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x228b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0125.053] RtlGetLastWin32Error () returned 0x3e5 [0125.053] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.053] RtlGetLastWin32Error () returned 0x26 [0125.053] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.053] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.053] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.053] RtlGetLastWin32Error () returned 0x3e5 [0125.053] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.053] CloseHandle (hObject=0x3d4) returned 1 [0125.056] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183850 [0125.056] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\CNJ7vM7xU_fqXr.xls" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\cnj7vm7xu_fqxr.xls"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\CNJ7vM7xU_fqXr.xls.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\cnj7vm7xu_fqxr.xls.1yg4ztc5")) returned 1 [0125.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.057] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0125.057] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0125.057] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.062] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x182dc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.062] RtlGetLastWin32Error () returned 0x3e5 [0125.062] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.063] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x182dc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.065] RtlGetLastWin32Error () returned 0x3e5 [0125.065] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.065] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x182dc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.065] RtlGetLastWin32Error () returned 0x3e5 [0125.065] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.065] RtlGetLastWin32Error () returned 0x26 [0125.065] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.065] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.065] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.066] RtlGetLastWin32Error () returned 0x3e5 [0125.066] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.066] CloseHandle (hObject=0x3d4) returned 1 [0125.080] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf8) returned 0x1183860 [0125.080] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\E0bAcSQhlr3rJxAYgov.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e0bacsqhlr3rjxaygov.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\E0bAcSQhlr3rJxAYgov.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\e0bacsqhlr3rjxaygov.xlsx.1yg4ztc5")) returned 1 [0125.081] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.081] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0125.081] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.083] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.087] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x74d9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.087] RtlGetLastWin32Error () returned 0x3e5 [0125.087] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.087] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x74d9, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.088] RtlGetLastWin32Error () returned 0x3e5 [0125.088] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.088] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x74d9, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0125.088] RtlGetLastWin32Error () returned 0x3e5 [0125.089] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.089] RtlGetLastWin32Error () returned 0x26 [0125.089] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.089] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.089] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.089] RtlGetLastWin32Error () returned 0x3e5 [0125.089] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.089] CloseHandle (hObject=0x3d4) returned 1 [0125.092] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xda) returned 0x1183840 [0125.092] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\ejY9.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejy9.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\ejY9.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ejy9.xlsx.1yg4ztc5")) returned 1 [0125.093] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.093] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183840) returned 1 [0125.093] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0125.094] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.098] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1cc2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.098] RtlGetLastWin32Error () returned 0x3e5 [0125.098] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.098] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x1cc2, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.099] RtlGetLastWin32Error () returned 0x3e5 [0125.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.099] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1cc2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0125.099] RtlGetLastWin32Error () returned 0x3e5 [0125.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.099] RtlGetLastWin32Error () returned 0x26 [0125.099] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.099] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.099] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.100] RtlGetLastWin32Error () returned 0x3e5 [0125.100] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.100] CloseHandle (hObject=0x3d4) returned 1 [0125.105] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183850 [0125.105] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\gNkCMwtLS49pa.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gnkcmwtls49pa.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\gNkCMwtLS49pa.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\gnkcmwtls49pa.docx.1yg4ztc5")) returned 1 [0125.106] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.106] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0125.106] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0125.106] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.111] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdb53, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.112] RtlGetLastWin32Error () returned 0x3e5 [0125.112] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.112] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xdb53, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.115] RtlGetLastWin32Error () returned 0x3e5 [0125.115] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.115] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdb53, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.115] RtlGetLastWin32Error () returned 0x3e5 [0125.115] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.115] RtlGetLastWin32Error () returned 0x26 [0125.115] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.115] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.115] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.116] RtlGetLastWin32Error () returned 0x3e5 [0125.116] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.116] CloseHandle (hObject=0x3d4) returned 1 [0125.121] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183850 [0125.121] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\hCetyp3G17Ciz.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\hcetyp3g17ciz.pps"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\hCetyp3G17Ciz.pps.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\hcetyp3g17ciz.pps.1yg4ztc5")) returned 1 [0125.122] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.122] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0125.122] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.123] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.127] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8ca5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.127] RtlGetLastWin32Error () returned 0x3e5 [0125.127] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.128] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x8ca5, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.129] RtlGetLastWin32Error () returned 0x3e5 [0125.129] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.129] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8ca5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.129] RtlGetLastWin32Error () returned 0x3e5 [0125.129] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.129] RtlGetLastWin32Error () returned 0x26 [0125.129] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.129] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.129] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.130] RtlGetLastWin32Error () returned 0x3e5 [0125.130] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.130] CloseHandle (hObject=0x3d4) returned 1 [0125.132] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183858 [0125.132] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\l DJMmpijuAsqr21.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l djmmpijuasqr21.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\l DJMmpijuAsqr21.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\l djmmpijuasqr21.pptx.1yg4ztc5")) returned 1 [0125.133] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.133] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183858) returned 1 [0125.133] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.134] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.137] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1d1b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.138] RtlGetLastWin32Error () returned 0x3e5 [0125.138] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.138] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x1d1b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.138] RtlGetLastWin32Error () returned 0x3e5 [0125.138] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.138] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x1d1b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0125.138] RtlGetLastWin32Error () returned 0x3e5 [0125.138] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.138] RtlGetLastWin32Error () returned 0x26 [0125.139] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.139] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.139] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.139] RtlGetLastWin32Error () returned 0x3e5 [0125.139] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.139] CloseHandle (hObject=0x3d4) returned 1 [0125.145] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183850 [0125.145] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\LSd7BeVtYtpJ.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lsd7bevtytpj.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\LSd7BeVtYtpJ.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\lsd7bevtytpj.pptx.1yg4ztc5")) returned 1 [0125.146] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0125.146] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183850) returned 1 [0125.146] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0125.146] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.154] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfe3a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.155] RtlGetLastWin32Error () returned 0x3e5 [0125.155] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.155] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xfe3a, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.157] RtlGetLastWin32Error () returned 0x3e5 [0125.157] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.157] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfe3a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.157] RtlGetLastWin32Error () returned 0x3e5 [0125.157] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.157] RtlGetLastWin32Error () returned 0x26 [0125.157] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.157] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.157] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.158] RtlGetLastWin32Error () returned 0x3e5 [0125.158] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.158] CloseHandle (hObject=0x3d4) returned 1 [0125.166] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x11838c8 [0125.166] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\RbIb11kyJBfbC4lR.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rbib11kyjbfbc4lr.docx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\RbIb11kyJBfbC4lR.docx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\rbib11kyjbfbc4lr.docx.1yg4ztc5")) returned 1 [0125.167] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.167] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c8) returned 1 [0125.167] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.183] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.191] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x466f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.191] RtlGetLastWin32Error () returned 0x3e5 [0125.192] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.192] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8874*, nNumberOfBytesToWrite=0x466f, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.194] RtlGetLastWin32Error () returned 0x3e5 [0125.194] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.194] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0x466f, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 0x0 [0125.194] RtlGetLastWin32Error () returned 0x3e5 [0125.194] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.194] RtlGetLastWin32Error () returned 0x26 [0125.194] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.194] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.194] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bc8740*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8740*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.195] RtlGetLastWin32Error () returned 0x3e5 [0125.195] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.195] CloseHandle (hObject=0x3d4) returned 1 [0125.205] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x11838c8 [0125.205] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\SJGjS-9yqVHR1Sr.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sjgjs-9yqvhr1sr.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\SJGjS-9yqVHR1Sr.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\sjgjs-9yqvhr1sr.xlsx.1yg4ztc5")) returned 1 [0125.209] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.209] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c8) returned 1 [0125.209] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8718) returned 1 [0125.209] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.226] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb9e4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.226] RtlGetLastWin32Error () returned 0x3e5 [0125.226] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.227] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb9e4, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.228] RtlGetLastWin32Error () returned 0x3e5 [0125.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.228] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb9e4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.228] RtlGetLastWin32Error () returned 0x3e5 [0125.228] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.229] RtlGetLastWin32Error () returned 0x26 [0125.229] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.229] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.229] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.229] RtlGetLastWin32Error () returned 0x3e5 [0125.229] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.230] CloseHandle (hObject=0x3d4) returned 1 [0125.237] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe8) returned 0x11838c0 [0125.237] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\uvUqY N6Bfi.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uvuqy n6bfi.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\uvUqY N6Bfi.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\uvuqy n6bfi.pptx.1yg4ztc5")) returned 1 [0125.238] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.238] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c0) returned 1 [0125.238] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.239] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.247] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x152ff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.248] RtlGetLastWin32Error () returned 0x3e5 [0125.248] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.249] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x152ff, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.251] RtlGetLastWin32Error () returned 0x3e5 [0125.251] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.251] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x152ff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.251] RtlGetLastWin32Error () returned 0x3e5 [0125.251] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.251] RtlGetLastWin32Error () returned 0x26 [0125.251] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.251] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.251] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.252] RtlGetLastWin32Error () returned 0x3e5 [0125.252] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.252] CloseHandle (hObject=0x3d4) returned 1 [0125.257] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x11838c0 [0125.257] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\V7HumL1ZZJKoPg.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\v7huml1zzjkopg.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\V7HumL1ZZJKoPg.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\v7huml1zzjkopg.pptx.1yg4ztc5")) returned 1 [0125.258] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183848) returned 1 [0125.258] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11838c0) returned 1 [0125.259] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.260] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.294] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9296, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.299] RtlGetLastWin32Error () returned 0x3e5 [0125.299] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.300] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x9296, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.301] RtlGetLastWin32Error () returned 0x3e5 [0125.301] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.301] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x9296, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.301] RtlGetLastWin32Error () returned 0x3e5 [0125.301] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.301] RtlGetLastWin32Error () returned 0x26 [0125.301] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.301] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.301] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.302] RtlGetLastWin32Error () returned 0x3e5 [0125.302] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.302] CloseHandle (hObject=0x3d4) returned 1 [0125.304] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183998 [0125.305] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yUtkkx8xYplRS.pptx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yutkkx8xyplrs.pptx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\yUtkkx8xYplRS.pptx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\yutkkx8xyplrs.pptx.1yg4ztc5")) returned 1 [0125.306] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0125.306] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183998) returned 1 [0125.306] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.307] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.313] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x93f6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.314] RtlGetLastWin32Error () returned 0x3e5 [0125.314] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.314] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x93f6, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.315] RtlGetLastWin32Error () returned 0x3e5 [0125.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.316] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x93f6, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.316] RtlGetLastWin32Error () returned 0x3e5 [0125.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.316] RtlGetLastWin32Error () returned 0x26 [0125.316] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.316] WriteFile (in: hFile=0x3d4, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.316] RtlGetLastWin32Error () returned 0x3e5 [0125.316] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.317] CloseHandle (hObject=0x3d4) returned 1 [0125.323] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x1183988 [0125.323] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\_6rIiH.xlsx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_6riih.xlsx"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\_6rIiH.xlsx.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_6riih.xlsx.1yg4ztc5")) returned 1 [0125.325] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183920) returned 1 [0125.325] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0125.325] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.326] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.338] ReadFile (in: hFile=0x3d4, lpBuffer=0x3bc8874, nNumberOfBytesToRead=0xd0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718 | out: lpBuffer=0x3bc8874*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8718) returned 1 [0125.339] RtlGetLastWin32Error () returned 0x3e5 [0125.339] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.357] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1004c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.357] RtlGetLastWin32Error () returned 0x3e5 [0125.357] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.358] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1004c, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.359] RtlGetLastWin32Error () returned 0x3e5 [0125.359] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.359] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1004c, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.359] RtlGetLastWin32Error () returned 0x3e5 [0125.359] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.359] RtlGetLastWin32Error () returned 0x26 [0125.360] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.360] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.360] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.360] RtlGetLastWin32Error () returned 0x3e5 [0125.360] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.360] CloseHandle (hObject=0x3d0) returned 1 [0125.365] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183a60 [0125.365] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\4W2zSw_qyA-iNvZwG.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\4w2zsw_qya-invzwg.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\4W2zSw_qyA-iNvZwG.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\4w2zsw_qya-invzwg.mp3.1yg4ztc5")) returned 1 [0125.366] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11839e8) returned 1 [0125.366] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a60) returned 1 [0125.367] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.367] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.376] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8dff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.377] RtlGetLastWin32Error () returned 0x3e5 [0125.377] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.377] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x8dff, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.378] RtlGetLastWin32Error () returned 0x3e5 [0125.378] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.379] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8dff, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.379] RtlGetLastWin32Error () returned 0x3e5 [0125.379] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.379] RtlGetLastWin32Error () returned 0x26 [0125.379] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.379] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.379] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.380] RtlGetLastWin32Error () returned 0x3e5 [0125.380] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.380] CloseHandle (hObject=0x3d0) returned 1 [0125.385] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe2) returned 0x1183ab8 [0125.385] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\DlddW4odh7 0R.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\dlddw4odh7 0r.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\DlddW4odh7 0R.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\dlddw4odh7 0r.mp3.1yg4ztc5")) returned 1 [0125.387] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.387] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab8) returned 1 [0125.387] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.387] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.391] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x386b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.392] RtlGetLastWin32Error () returned 0x3e5 [0125.392] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.392] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x386b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.393] RtlGetLastWin32Error () returned 0x3e5 [0125.393] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.393] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x386b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.393] RtlGetLastWin32Error () returned 0x3e5 [0125.393] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.393] RtlGetLastWin32Error () returned 0x26 [0125.393] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.393] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.394] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.394] RtlGetLastWin32Error () returned 0x3e5 [0125.394] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.394] CloseHandle (hObject=0x3d0) returned 1 [0125.400] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe2) returned 0x1183ab8 [0125.400] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\Hy6kK83v326kg.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\hy6kk83v326kg.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\Hy6kK83v326kg.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\hy6kk83v326kg.m4a.1yg4ztc5")) returned 1 [0125.402] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.402] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab8) returned 1 [0125.402] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.402] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.405] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x56c8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.406] RtlGetLastWin32Error () returned 0x3e5 [0125.406] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.406] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x56c8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.407] RtlGetLastWin32Error () returned 0x3e5 [0125.407] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.407] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x56c8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0125.407] RtlGetLastWin32Error () returned 0x3e5 [0125.407] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.407] RtlGetLastWin32Error () returned 0x26 [0125.407] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.407] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.408] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0125.408] RtlGetLastWin32Error () returned 0x3e5 [0125.408] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.408] CloseHandle (hObject=0x3d0) returned 1 [0125.413] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183ac0 [0125.413] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I DXBf6fbq5DmIhEE.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i dxbf6fbq5dmihee.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I DXBf6fbq5DmIhEE.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i dxbf6fbq5dmihee.m4a.1yg4ztc5")) returned 1 [0125.414] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.414] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac0) returned 1 [0125.414] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0125.414] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.533] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1535e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.534] RtlGetLastWin32Error () returned 0x3e5 [0125.534] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.535] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1535e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.536] RtlGetLastWin32Error () returned 0x3e5 [0125.536] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.537] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1535e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.537] RtlGetLastWin32Error () returned 0x3e5 [0125.537] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.537] RtlGetLastWin32Error () returned 0x26 [0125.537] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.537] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.537] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.538] RtlGetLastWin32Error () returned 0x3e5 [0125.538] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.538] CloseHandle (hObject=0x3d0) returned 1 [0125.541] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183ac0 [0125.541] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\iLGIuAawkATxwUujSc.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ilgiuaawkatxwuujsc.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\iLGIuAawkATxwUujSc.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ilgiuaawkatxwuujsc.m4a.1yg4ztc5")) returned 1 [0125.542] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.542] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac0) returned 1 [0125.542] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.545] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.557] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15f07, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.558] RtlGetLastWin32Error () returned 0x3e5 [0125.558] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.559] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x15f07, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.565] RtlGetLastWin32Error () returned 0x3e5 [0125.565] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.565] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x15f07, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.566] RtlGetLastWin32Error () returned 0x3e5 [0125.566] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.566] RtlGetLastWin32Error () returned 0x26 [0125.566] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.566] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.566] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.568] RtlGetLastWin32Error () returned 0x3e5 [0125.568] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.568] CloseHandle (hObject=0x3d0) returned 1 [0125.573] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xda) returned 0x1183ab0 [0125.573] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\ipeVoX06U.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ipevox06u.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\ipeVoX06U.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\ipevox06u.mp3.1yg4ztc5")) returned 1 [0125.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.574] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0125.574] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.574] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.578] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb8a7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.579] RtlGetLastWin32Error () returned 0x3e5 [0125.579] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.579] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb8a7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.580] RtlGetLastWin32Error () returned 0x3e5 [0125.580] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.580] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb8a7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.580] RtlGetLastWin32Error () returned 0x3e5 [0125.580] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.581] RtlGetLastWin32Error () returned 0x26 [0125.581] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.581] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.581] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.581] RtlGetLastWin32Error () returned 0x3e5 [0125.581] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.581] CloseHandle (hObject=0x3d0) returned 1 [0125.589] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183ac0 [0125.589] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I_EcfLMno5hLsDXInPs.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i_ecflmno5hlsdxinps.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\I_EcfLMno5hLsDXInPs.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\i_ecflmno5hlsdxinps.mp3.1yg4ztc5")) returned 1 [0125.593] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.593] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac0) returned 1 [0125.593] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.594] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.597] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdb91, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.597] RtlGetLastWin32Error () returned 0x3e5 [0125.598] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.598] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xdb91, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.605] RtlGetLastWin32Error () returned 0x3e5 [0125.605] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.606] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xdb91, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.606] RtlGetLastWin32Error () returned 0x3e5 [0125.606] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.606] RtlGetLastWin32Error () returned 0x26 [0125.606] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.606] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.606] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.606] RtlGetLastWin32Error () returned 0x3e5 [0125.606] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.607] CloseHandle (hObject=0x3d0) returned 1 [0125.615] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x1183ab0 [0125.615] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\l5AuKPVeEq1.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\l5aukpveeq1.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\l5AuKPVeEq1.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\l5aukpveeq1.m4a.1yg4ztc5")) returned 1 [0125.617] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.617] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0125.617] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.617] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.620] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14869, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.621] RtlGetLastWin32Error () returned 0x3e5 [0125.621] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.622] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14869, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.623] RtlGetLastWin32Error () returned 0x3e5 [0125.623] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.623] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14869, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.624] RtlGetLastWin32Error () returned 0x3e5 [0125.624] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.624] RtlGetLastWin32Error () returned 0x26 [0125.624] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.624] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.624] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.624] RtlGetLastWin32Error () returned 0x3e5 [0125.624] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.624] CloseHandle (hObject=0x3d0) returned 1 [0125.640] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183ac0 [0125.641] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\mjQXCIBoEGsRIXG5UH1.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\mjqxciboegsrixg5uh1.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\mjQXCIBoEGsRIXG5UH1.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\mjqxciboegsrixg5uh1.wav.1yg4ztc5")) returned 1 [0125.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.642] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac0) returned 1 [0125.642] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.642] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.646] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbc9e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.646] RtlGetLastWin32Error () returned 0x3e5 [0125.647] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.647] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xbc9e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.648] RtlGetLastWin32Error () returned 0x3e5 [0125.648] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.648] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xbc9e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.648] RtlGetLastWin32Error () returned 0x3e5 [0125.648] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.648] RtlGetLastWin32Error () returned 0x26 [0125.648] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.648] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.648] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.649] RtlGetLastWin32Error () returned 0x3e5 [0125.649] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.649] CloseHandle (hObject=0x3d0) returned 1 [0125.652] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd0) returned 0x1183aa8 [0125.652] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\pERp.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\perp.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\pERp.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\perp.m4a.1yg4ztc5")) returned 1 [0125.653] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.653] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0125.653] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.654] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.657] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xcc4e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.658] RtlGetLastWin32Error () returned 0x3e5 [0125.658] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.658] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xcc4e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.659] RtlGetLastWin32Error () returned 0x3e5 [0125.659] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.659] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xcc4e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.659] RtlGetLastWin32Error () returned 0x3e5 [0125.659] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.659] RtlGetLastWin32Error () returned 0x26 [0125.659] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.659] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.659] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.660] RtlGetLastWin32Error () returned 0x3e5 [0125.660] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.660] CloseHandle (hObject=0x3d0) returned 1 [0125.662] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x1183ac8 [0125.663] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\sp8U4eZ5gjmARGZzERiC.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\sp8u4ez5gjmargzzeric.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\sp8U4eZ5gjmARGZzERiC.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\sp8u4ez5gjmargzzeric.mp3.1yg4ztc5")) returned 1 [0125.664] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.664] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ac8) returned 1 [0125.664] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.664] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.668] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10cdd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0125.669] RtlGetLastWin32Error () returned 0x3e5 [0125.669] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.669] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10cdd, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.678] RtlGetLastWin32Error () returned 0x3e5 [0125.678] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.678] ReadFile (in: hFile=0x3d0, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10cdd, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0125.680] RtlGetLastWin32Error () returned 0x3e5 [0125.680] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0125.681] RtlGetLastWin32Error () returned 0x26 [0125.681] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0125.681] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.681] WriteFile (in: hFile=0x3d0, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0125.682] RtlGetLastWin32Error () returned 0x3e5 [0125.682] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0125.682] CloseHandle (hObject=0x3d0) returned 1 [0125.685] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xd8) returned 0x1183ab0 [0125.687] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\SynGA4LX.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\synga4lx.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\SynGA4LX.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\synga4lx.mp3.1yg4ztc5")) returned 1 [0125.696] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a48) returned 1 [0125.696] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab0) returned 1 [0125.696] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0125.698] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.293] ReadFile (in: hFile=0x3dc, lpBuffer=0x3b0cb64, nNumberOfBytesToRead=0x1076e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.294] RtlGetLastWin32Error () returned 0x3e5 [0126.294] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.296] WriteFile (in: hFile=0x3dc, lpBuffer=0x3b0cb64*, nNumberOfBytesToWrite=0x1076e, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.297] RtlGetLastWin32Error () returned 0x3e5 [0126.297] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.297] ReadFile (in: hFile=0x3dc, lpBuffer=0x3b0cb64, nNumberOfBytesToRead=0x1076e, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0cb64, lpNumberOfBytesRead=0x0, lpOverlapped=0x3b0ca08) returned 0x0 [0126.297] RtlGetLastWin32Error () returned 0x3e5 [0126.297] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.297] RtlGetLastWin32Error () returned 0x26 [0126.297] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.298] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.298] WriteFile (in: hFile=0x3dc, lpBuffer=0x3b0ca30*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08 | out: lpBuffer=0x3b0ca30*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3b0ca08) returned 1 [0126.298] RtlGetLastWin32Error () returned 0x3e5 [0126.298] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.298] CloseHandle (hObject=0x3dc) returned 1 [0126.305] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x104) returned 0x1183e98 [0126.305] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gTpR4bHCjaGhqviGa-e.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gtpr4bhcjaghqviga-e.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gTpR4bHCjaGhqviGa-e.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\gtpr4bhcjaghqviga-e.m4a.1yg4ztc5")) returned 1 [0126.306] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.306] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.306] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3b0ca08) returned 1 [0126.308] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.311] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2092, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.311] RtlGetLastWin32Error () returned 0x3e5 [0126.311] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.311] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x2092, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.312] RtlGetLastWin32Error () returned 0x3e5 [0126.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.312] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x2092, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.312] RtlGetLastWin32Error () returned 0x3e5 [0126.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.312] RtlGetLastWin32Error () returned 0x26 [0126.312] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.312] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.312] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.312] RtlGetLastWin32Error () returned 0x3e5 [0126.313] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.313] CloseHandle (hObject=0x3dc) returned 1 [0126.316] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x106) returned 0x1183e98 [0126.316] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JDuNSpuPCB9nrCX1hxhf.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jdunspupcb9nrcx1hxhf.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JDuNSpuPCB9nrCX1hxhf.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jdunspupcb9nrcx1hxhf.m4a.1yg4ztc5")) returned 1 [0126.317] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.317] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.317] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.317] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.321] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8c16, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.321] RtlGetLastWin32Error () returned 0x3e5 [0126.321] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.321] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x8c16, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.322] RtlGetLastWin32Error () returned 0x3e5 [0126.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.322] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8c16, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.322] RtlGetLastWin32Error () returned 0x3e5 [0126.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.322] RtlGetLastWin32Error () returned 0x26 [0126.322] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.322] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.322] RtlGetLastWin32Error () returned 0x3e5 [0126.322] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.323] CloseHandle (hObject=0x3dc) returned 1 [0126.329] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfa) returned 0x1183e98 [0126.329] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JGznrvkEEvxn00.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jgznrvkeevxn00.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\JGznrvkEEvxn00.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\jgznrvkeevxn00.wav.1yg4ztc5")) returned 1 [0126.330] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.330] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.330] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.331] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.333] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1003, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.333] RtlGetLastWin32Error () returned 0x3e5 [0126.333] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.333] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1003, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.335] RtlGetLastWin32Error () returned 0x3e5 [0126.335] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.335] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1003, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.335] RtlGetLastWin32Error () returned 0x3e5 [0126.335] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.335] RtlGetLastWin32Error () returned 0x26 [0126.335] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.335] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.335] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.336] RtlGetLastWin32Error () returned 0x3e5 [0126.336] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.336] CloseHandle (hObject=0x3dc) returned 1 [0126.340] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x1183e98 [0126.340] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmJs.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmjs.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmJs.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\leot2gmjs.m4a.1yg4ztc5")) returned 1 [0126.341] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.341] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.341] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.341] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.344] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1860a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.345] RtlGetLastWin32Error () returned 0x3e5 [0126.345] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.346] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1860a, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.347] RtlGetLastWin32Error () returned 0x3e5 [0126.347] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.347] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1860a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.348] RtlGetLastWin32Error () returned 0x3e5 [0126.348] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.348] RtlGetLastWin32Error () returned 0x26 [0126.348] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.348] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.348] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.348] RtlGetLastWin32Error () returned 0x3e5 [0126.348] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.348] CloseHandle (hObject=0x3dc) returned 1 [0126.352] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183e98 [0126.352] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lSPgMK9.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lspgmk9.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lSPgMK9.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\lspgmk9.wav.1yg4ztc5")) returned 1 [0126.353] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.354] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.354] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.355] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.360] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa912, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.361] RtlGetLastWin32Error () returned 0x3e5 [0126.361] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.361] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xa912, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.362] RtlGetLastWin32Error () returned 0x3e5 [0126.362] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.362] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xa912, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.362] RtlGetLastWin32Error () returned 0x3e5 [0126.362] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.363] RtlGetLastWin32Error () returned 0x26 [0126.363] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.363] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.363] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.363] RtlGetLastWin32Error () returned 0x3e5 [0126.363] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.363] CloseHandle (hObject=0x3dc) returned 1 [0126.369] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183e98 [0126.369] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\O1uOZTDu.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\o1uoztdu.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\O1uOZTDu.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\o1uoztdu.mp3.1yg4ztc5")) returned 1 [0126.370] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.370] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.370] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.370] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.374] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfd74, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.374] RtlGetLastWin32Error () returned 0x3e5 [0126.374] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.375] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xfd74, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.376] RtlGetLastWin32Error () returned 0x3e5 [0126.376] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.376] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xfd74, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.376] RtlGetLastWin32Error () returned 0x3e5 [0126.377] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.377] RtlGetLastWin32Error () returned 0x26 [0126.377] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.377] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.377] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.377] RtlGetLastWin32Error () returned 0x3e5 [0126.377] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.377] CloseHandle (hObject=0x3dc) returned 1 [0126.380] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183e98 [0126.380] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\RH8_sB7GO_faGWB.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\rh8_sb7go_fagwb.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\RH8_sB7GO_faGWB.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\rh8_sb7go_fagwb.m4a.1yg4ztc5")) returned 1 [0126.381] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.381] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.381] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.382] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.386] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x78e3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.386] RtlGetLastWin32Error () returned 0x3e5 [0126.386] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.387] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x78e3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.388] RtlGetLastWin32Error () returned 0x3e5 [0126.388] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.388] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x78e3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.388] RtlGetLastWin32Error () returned 0x3e5 [0126.388] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.388] RtlGetLastWin32Error () returned 0x26 [0126.388] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.388] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.388] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.389] RtlGetLastWin32Error () returned 0x3e5 [0126.389] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.389] CloseHandle (hObject=0x3dc) returned 1 [0126.391] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183e98 [0126.391] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufBNll.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufbnll.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufBNll.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\ufbnll.m4a.1yg4ztc5")) returned 1 [0126.391] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.391] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.392] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.392] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.395] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xab00, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.395] RtlGetLastWin32Error () returned 0x3e5 [0126.395] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.396] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xab00, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.396] RtlGetLastWin32Error () returned 0x3e5 [0126.396] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.396] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xab00, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.396] RtlGetLastWin32Error () returned 0x3e5 [0126.397] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.397] RtlGetLastWin32Error () returned 0x26 [0126.397] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.397] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.397] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.397] RtlGetLastWin32Error () returned 0x3e5 [0126.397] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.397] CloseHandle (hObject=0x3dc) returned 1 [0126.400] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183e98 [0126.400] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxGAE7Dj.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxgae7dj.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxGAE7Dj.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\wxgae7dj.wav.1yg4ztc5")) returned 1 [0126.401] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.401] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.401] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.401] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.404] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x7436, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.404] RtlGetLastWin32Error () returned 0x3e5 [0126.404] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.405] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x7436, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.405] RtlGetLastWin32Error () returned 0x3e5 [0126.405] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.405] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x7436, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.406] RtlGetLastWin32Error () returned 0x3e5 [0126.406] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.406] RtlGetLastWin32Error () returned 0x26 [0126.406] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.406] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.406] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.406] RtlGetLastWin32Error () returned 0x3e5 [0126.406] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.406] CloseHandle (hObject=0x3dc) returned 1 [0126.408] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfe) returned 0x1183e98 [0126.408] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\Y_pSjsnzlmt uLUc.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\y_psjsnzlmt uluc.mp3"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\Y_pSjsnzlmt uLUc.mp3.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\y_psjsnzlmt uluc.mp3.1yg4ztc5")) returned 1 [0126.409] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.409] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.409] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.409] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.412] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xf3ce, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.412] RtlGetLastWin32Error () returned 0x3e5 [0126.412] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.413] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xf3ce, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.414] RtlGetLastWin32Error () returned 0x3e5 [0126.414] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.414] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xf3ce, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.414] RtlGetLastWin32Error () returned 0x3e5 [0126.415] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.415] RtlGetLastWin32Error () returned 0x26 [0126.415] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.415] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.415] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.415] RtlGetLastWin32Error () returned 0x3e5 [0126.415] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.416] CloseHandle (hObject=0x3dc) returned 1 [0126.420] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf6) returned 0x1183e98 [0126.420] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzN Mww_Bkx.wav" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzn mww_bkx.wav"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzN Mww_Bkx.wav.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zbzn mww_bkx.wav.1yg4ztc5")) returned 1 [0126.422] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c978) returned 1 [0126.422] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.422] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.423] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.430] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xffc8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.431] RtlGetLastWin32Error () returned 0x3e5 [0126.431] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.431] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xffc8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.432] RtlGetLastWin32Error () returned 0x3e5 [0126.433] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.433] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xffc8, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.433] RtlGetLastWin32Error () returned 0x3e5 [0126.433] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.433] RtlGetLastWin32Error () returned 0x26 [0126.433] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.433] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.433] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.435] RtlGetLastWin32Error () returned 0x3e5 [0126.435] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.435] CloseHandle (hObject=0x3dc) returned 1 [0126.440] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x106) returned 0x1183e98 [0126.440] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpUSLDdQvFXBODSYNS-w.m4a" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpuslddqvfxbodsyns-w.m4a"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpUSLDdQvFXBODSYNS-w.m4a.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\7xfazggdo2\\zpuslddqvfxbodsyns-w.m4a.1yg4ztc5")) returned 1 [0126.441] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.441] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e98) returned 1 [0126.441] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.442] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.460] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8f08, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.461] RtlGetLastWin32Error () returned 0x3e5 [0126.461] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.461] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x8f08, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.464] RtlGetLastWin32Error () returned 0x3e5 [0126.464] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.464] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x8f08, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.464] RtlGetLastWin32Error () returned 0x3e5 [0126.464] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.464] RtlGetLastWin32Error () returned 0x26 [0126.464] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.464] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.465] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.465] RtlGetLastWin32Error () returned 0x3e5 [0126.465] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.465] CloseHandle (hObject=0x3dc) returned 1 [0126.469] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x1183988 [0126.469] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2UmmY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2ummy.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2UmmY.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\2ummy.bmp.1yg4ztc5")) returned 1 [0126.470] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.471] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.471] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.471] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.476] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16264, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.477] RtlGetLastWin32Error () returned 0x3e5 [0126.477] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.478] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x16264, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.479] RtlGetLastWin32Error () returned 0x3e5 [0126.479] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.479] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16264, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.479] RtlGetLastWin32Error () returned 0x3e5 [0126.479] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.479] RtlGetLastWin32Error () returned 0x26 [0126.480] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.480] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.480] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.480] RtlGetLastWin32Error () returned 0x3e5 [0126.480] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.480] CloseHandle (hObject=0x3dc) returned 1 [0126.484] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfe) returned 0x1183988 [0126.485] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\B-TyRFGPPXknyiuqW.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\b-tyrfgppxknyiuqw.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\B-TyRFGPPXknyiuqW.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\b-tyrfgppxknyiuqw.png.1yg4ztc5")) returned 1 [0126.486] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183860) returned 1 [0126.486] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.486] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.488] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.493] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x154e0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.494] RtlGetLastWin32Error () returned 0x3e5 [0126.494] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.495] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x154e0, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.496] RtlGetLastWin32Error () returned 0x3e5 [0126.496] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.497] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x154e0, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.497] RtlGetLastWin32Error () returned 0x3e5 [0126.497] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.497] RtlGetLastWin32Error () returned 0x26 [0126.497] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.497] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.497] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.497] RtlGetLastWin32Error () returned 0x3e5 [0126.497] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.497] CloseHandle (hObject=0x3dc) returned 1 [0126.504] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe8) returned 0x1183988 [0126.505] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\IaTgbd.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\iatgbd.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\IaTgbd.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\iatgbd.png.1yg4ztc5")) returned 1 [0126.506] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.506] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.506] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.507] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.512] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe207, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.513] RtlGetLastWin32Error () returned 0x3e5 [0126.513] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.516] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xe207, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.518] RtlGetLastWin32Error () returned 0x3e5 [0126.518] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.518] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe207, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.518] RtlGetLastWin32Error () returned 0x3e5 [0126.518] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.518] RtlGetLastWin32Error () returned 0x26 [0126.518] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.519] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.519] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.519] RtlGetLastWin32Error () returned 0x3e5 [0126.519] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.519] CloseHandle (hObject=0x3dc) returned 1 [0126.524] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183988 [0126.525] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kQUblf2Z.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kqublf2z.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kQUblf2Z.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\kqublf2z.gif.1yg4ztc5")) returned 1 [0126.526] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.526] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.526] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.527] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.533] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x114b3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.534] RtlGetLastWin32Error () returned 0x3e5 [0126.534] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.534] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x114b3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.537] RtlGetLastWin32Error () returned 0x3e5 [0126.537] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.538] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x114b3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.538] RtlGetLastWin32Error () returned 0x3e5 [0126.538] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.538] RtlGetLastWin32Error () returned 0x26 [0126.538] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.538] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.538] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.538] RtlGetLastWin32Error () returned 0x3e5 [0126.538] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.539] CloseHandle (hObject=0x3dc) returned 1 [0126.549] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe6) returned 0x1183988 [0126.549] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6s-a l\\rbdcx.bmp.1yg4ztc5")) returned 1 [0126.550] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.550] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.550] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.551] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.573] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1474, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.573] RtlGetLastWin32Error () returned 0x3e5 [0126.573] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.573] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1474, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.574] RtlGetLastWin32Error () returned 0x3e5 [0126.574] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.574] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1474, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.574] RtlGetLastWin32Error () returned 0x3e5 [0126.574] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.574] RtlGetLastWin32Error () returned 0x26 [0126.574] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.574] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.574] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.575] RtlGetLastWin32Error () returned 0x3e5 [0126.575] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.575] CloseHandle (hObject=0x3dc) returned 1 [0126.577] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf0) returned 0x1183988 [0126.577] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzBZ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzbz.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzBZ.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\ufzbz.gif.1yg4ztc5")) returned 1 [0126.578] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117ca78) returned 1 [0126.578] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.578] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.578] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.581] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1ce2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.581] RtlGetLastWin32Error () returned 0x3e5 [0126.581] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.581] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x1ce2, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.582] RtlGetLastWin32Error () returned 0x3e5 [0126.582] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.582] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x1ce2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.582] RtlGetLastWin32Error () returned 0x3e5 [0126.582] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.582] RtlGetLastWin32Error () returned 0x26 [0126.582] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.582] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.582] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.583] RtlGetLastWin32Error () returned 0x3e5 [0126.583] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.583] CloseHandle (hObject=0x3dc) returned 1 [0126.590] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183988 [0126.590] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\Yapy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\yapy.png"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\Yapy.png.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\l5ijd4gbqss\\yapy.png.1yg4ztc5")) returned 1 [0126.592] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.592] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.592] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.592] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.600] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb4e5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.600] RtlGetLastWin32Error () returned 0x3e5 [0126.602] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.602] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xb4e5, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.603] RtlGetLastWin32Error () returned 0x3e5 [0126.603] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.603] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xb4e5, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.603] RtlGetLastWin32Error () returned 0x3e5 [0126.603] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.603] RtlGetLastWin32Error () returned 0x26 [0126.603] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.603] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.603] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.604] RtlGetLastWin32Error () returned 0x3e5 [0126.604] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.604] CloseHandle (hObject=0x3dc) returned 1 [0126.606] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183988 [0126.606] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5JyH.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5jyh.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5JyH.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\5jyh.jpg.1yg4ztc5")) returned 1 [0126.607] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.607] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.607] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.608] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.612] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd161, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.613] RtlGetLastWin32Error () returned 0x3e5 [0126.613] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.613] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xd161, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.614] RtlGetLastWin32Error () returned 0x3e5 [0126.614] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.614] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xd161, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.614] RtlGetLastWin32Error () returned 0x3e5 [0126.614] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.614] RtlGetLastWin32Error () returned 0x26 [0126.614] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.614] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.614] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.615] RtlGetLastWin32Error () returned 0x3e5 [0126.615] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.615] CloseHandle (hObject=0x3dc) returned 1 [0126.620] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x102) returned 0x1183a18 [0126.621] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9MXtjEu6M.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9mxtjeu6m.jpg"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9MXtjEu6M.jpg.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\i7llpv9mxtjeu6m.jpg.1yg4ztc5")) returned 1 [0126.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.622] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a18) returned 1 [0126.622] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.623] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.626] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x18f3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.626] RtlGetLastWin32Error () returned 0x3e5 [0126.626] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.626] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x18f3, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.626] RtlGetLastWin32Error () returned 0x3e5 [0126.626] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.626] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x18f3, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.627] RtlGetLastWin32Error () returned 0x3e5 [0126.627] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.627] RtlGetLastWin32Error () returned 0x26 [0126.627] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.627] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.627] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.627] RtlGetLastWin32Error () returned 0x3e5 [0126.628] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.628] CloseHandle (hObject=0x3dc) returned 1 [0126.629] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xec) returned 0x1183988 [0126.630] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsAG.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsag.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsAG.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pihosizt0v\\rsag.gif.1yg4ztc5")) returned 1 [0126.630] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.630] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183988) returned 1 [0126.630] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.631] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.654] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc62a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.655] RtlGetLastWin32Error () returned 0x3e5 [0126.655] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.655] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc62a, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.656] RtlGetLastWin32Error () returned 0x3e5 [0126.656] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.656] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc62a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.656] RtlGetLastWin32Error () returned 0x3e5 [0126.656] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.656] RtlGetLastWin32Error () returned 0x26 [0126.656] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.657] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.657] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.657] RtlGetLastWin32Error () returned 0x3e5 [0126.657] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.657] CloseHandle (hObject=0x3dc) returned 1 [0126.659] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf2) returned 0x1183a10 [0126.659] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\IIuKhqW.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\iiukhqw.gif"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\IIuKhqW.gif.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\iiukhqw.gif.1yg4ztc5")) returned 1 [0126.660] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117cb78) returned 1 [0126.660] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.660] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.661] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.665] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xad7b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.665] RtlGetLastWin32Error () returned 0x3e5 [0126.666] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.666] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToWrite=0xad7b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.667] RtlGetLastWin32Error () returned 0x3e5 [0126.667] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.667] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xad7b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.668] RtlGetLastWin32Error () returned 0x3e5 [0126.668] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.668] RtlGetLastWin32Error () returned 0x26 [0126.668] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.668] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.668] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.668] RtlGetLastWin32Error () returned 0x3e5 [0126.668] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.668] CloseHandle (hObject=0x3dc) returned 1 [0126.670] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x10c) returned 0x1183aa8 [0126.670] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\Y_Xs 4xskgupJwFhAzLH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\y_xs 4xskgupjwfhazlh.bmp"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\Y_Xs 4xskgupJwFhAzLH.bmp.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\xwxyg9hii4\\y_xs 4xskgupjwfhazlh.bmp.1yg4ztc5")) returned 1 [0126.671] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.671] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0126.671] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.671] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.677] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x6f0b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.678] RtlGetLastWin32Error () returned 0x3e5 [0126.678] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.678] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x6f0b, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.679] RtlGetLastWin32Error () returned 0x3e5 [0126.679] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.679] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x6f0b, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.679] RtlGetLastWin32Error () returned 0x3e5 [0126.679] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.679] RtlGetLastWin32Error () returned 0x26 [0126.680] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.680] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.680] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.680] RtlGetLastWin32Error () returned 0x3e5 [0126.680] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.680] CloseHandle (hObject=0x3dc) returned 1 [0126.685] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xee) returned 0x1183a10 [0126.685] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvUOE8E13XW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvuoe8e13xw.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvUOE8E13XW.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9avvuoe8e13xw.mp4.1yg4ztc5")) returned 1 [0126.686] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa00) returned 1 [0126.686] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.686] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.686] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.689] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x84fc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.689] RtlGetLastWin32Error () returned 0x3e5 [0126.689] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.689] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x84fc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.690] RtlGetLastWin32Error () returned 0x3e5 [0126.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.690] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x84fc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.690] RtlGetLastWin32Error () returned 0x3e5 [0126.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.690] RtlGetLastWin32Error () returned 0x26 [0126.690] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.690] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.691] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.691] RtlGetLastWin32Error () returned 0x3e5 [0126.691] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.691] CloseHandle (hObject=0x3dc) returned 1 [0126.697] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf4) returned 0x1183a10 [0126.697] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9YyfpISvoY2vb57M.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9yyfpisvoy2vb57m.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9YyfpISvoY2vb57M.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\9yyfpisvoy2vb57m.avi.1yg4ztc5")) returned 1 [0126.698] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117c8f8) returned 1 [0126.698] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.698] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.698] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.702] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1786a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.703] RtlGetLastWin32Error () returned 0x3e5 [0126.703] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.704] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x1786a, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.705] RtlGetLastWin32Error () returned 0x3e5 [0126.705] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.706] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x1786a, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.706] RtlGetLastWin32Error () returned 0x3e5 [0126.706] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.706] RtlGetLastWin32Error () returned 0x26 [0126.706] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.706] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.706] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.707] RtlGetLastWin32Error () returned 0x3e5 [0126.707] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.707] CloseHandle (hObject=0x3dc) returned 1 [0126.711] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xdc) returned 0x1183a10 [0126.711] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\AfS_.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\afs_.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\AfS_.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\afs_.mp4.1yg4ztc5")) returned 1 [0126.712] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.712] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.712] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.714] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.719] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5636, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.719] RtlGetLastWin32Error () returned 0x3e5 [0126.719] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.720] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x5636, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.720] RtlGetLastWin32Error () returned 0x3e5 [0126.720] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.720] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x5636, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.720] RtlGetLastWin32Error () returned 0x3e5 [0126.721] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.721] RtlGetLastWin32Error () returned 0x26 [0126.721] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.721] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.721] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.721] RtlGetLastWin32Error () returned 0x3e5 [0126.721] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.721] CloseHandle (hObject=0x3dc) returned 1 [0126.723] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xf6) returned 0x1183a10 [0126.723] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fCAhoT3_1e71to2Wm.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fcahot3_1e71to2wm.avi"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fCAhoT3_1e71to2Wm.avi.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\fcahot3_1e71to2wm.avi.1yg4ztc5")) returned 1 [0126.724] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x117caf8) returned 1 [0126.724] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.724] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.724] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.730] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14fbe, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.730] RtlGetLastWin32Error () returned 0x3e5 [0126.730] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.731] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14fbe, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.733] RtlGetLastWin32Error () returned 0x3e5 [0126.733] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.733] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14fbe, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.733] RtlGetLastWin32Error () returned 0x3e5 [0126.733] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.733] RtlGetLastWin32Error () returned 0x26 [0126.733] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.733] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.734] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.734] RtlGetLastWin32Error () returned 0x3e5 [0126.734] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.734] CloseHandle (hObject=0x3dc) returned 1 [0126.737] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xde) returned 0x1183a10 [0126.737] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\Kf2M4.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kf2m4.mkv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\Kf2M4.mkv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kf2m4.mkv.1yg4ztc5")) returned 1 [0126.738] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.739] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.739] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.740] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.747] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10e01, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.748] RtlGetLastWin32Error () returned 0x3e5 [0126.748] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.748] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x10e01, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.750] RtlGetLastWin32Error () returned 0x3e5 [0126.750] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.750] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x10e01, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.750] RtlGetLastWin32Error () returned 0x3e5 [0126.750] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.750] RtlGetLastWin32Error () returned 0x26 [0126.750] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.751] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.751] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.751] RtlGetLastWin32Error () returned 0x3e5 [0126.751] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.751] CloseHandle (hObject=0x3dc) returned 1 [0126.760] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xea) returned 0x1183a10 [0126.761] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzDOkTC6Kdq.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzdoktc6kdq.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzDOkTC6Kdq.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\kzdoktc6kdq.swf.1yg4ztc5")) returned 1 [0126.762] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffaf0) returned 1 [0126.762] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.762] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.763] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.767] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18ac4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.768] RtlGetLastWin32Error () returned 0x3e5 [0126.768] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.769] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x18ac4, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.770] RtlGetLastWin32Error () returned 0x3e5 [0126.770] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.771] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x18ac4, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.771] RtlGetLastWin32Error () returned 0x3e5 [0126.771] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.771] RtlGetLastWin32Error () returned 0x26 [0126.771] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.771] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.771] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.771] RtlGetLastWin32Error () returned 0x3e5 [0126.771] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.771] CloseHandle (hObject=0x3dc) returned 1 [0126.777] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe4) returned 0x1183a10 [0126.777] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\OIMFe7MA.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\oimfe7ma.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\OIMFe7MA.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\oimfe7ma.swf.1yg4ztc5")) returned 1 [0126.778] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11836b8) returned 1 [0126.778] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.778] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.779] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.784] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc954, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.785] RtlGetLastWin32Error () returned 0x3e5 [0126.785] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.785] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToWrite=0xc954, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.786] RtlGetLastWin32Error () returned 0x3e5 [0126.786] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.786] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc954, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.787] RtlGetLastWin32Error () returned 0x3e5 [0126.787] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.787] RtlGetLastWin32Error () returned 0x26 [0126.787] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.787] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.787] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.787] RtlGetLastWin32Error () returned 0x3e5 [0126.787] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.787] CloseHandle (hObject=0x3dc) returned 1 [0126.790] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xe8) returned 0x1183a10 [0126.790] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urEwLAVDg6.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urewlavdg6.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urEwLAVDg6.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\8boi\\urewlavdg6.mp4.1yg4ztc5")) returned 1 [0126.791] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11ffa00) returned 1 [0126.791] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.791] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.792] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.799] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x11fee, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.813] RtlGetLastWin32Error () returned 0x3e5 [0126.815] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.816] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x11fee, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.818] RtlGetLastWin32Error () returned 0x3e5 [0126.818] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.818] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x11fee, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.818] RtlGetLastWin32Error () returned 0x3e5 [0126.818] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.818] RtlGetLastWin32Error () returned 0x26 [0126.818] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.818] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.818] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.819] RtlGetLastWin32Error () returned 0x3e5 [0126.819] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.819] CloseHandle (hObject=0x3dc) returned 1 [0126.823] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x10e) returned 0x1183aa8 [0126.824] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtJwvVY4a.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtjwvvy4a.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtJwvVY4a.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\0wjnewtjwvvy4a.flv.1yg4ztc5")) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0126.825] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.826] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.835] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x68c7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.835] RtlGetLastWin32Error () returned 0x3e5 [0126.836] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.836] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x68c7, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.837] RtlGetLastWin32Error () returned 0x3e5 [0126.837] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.837] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x68c7, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.837] RtlGetLastWin32Error () returned 0x3e5 [0126.837] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.837] RtlGetLastWin32Error () returned 0x26 [0126.837] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.837] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.838] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.838] RtlGetLastWin32Error () returned 0x3e5 [0126.838] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.838] CloseHandle (hObject=0x3dc) returned 1 [0126.846] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfa) returned 0x1183a98 [0126.846] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8SOP.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8sop.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8SOP.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\8sop.mp4.1yg4ztc5")) returned 1 [0126.847] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.847] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a98) returned 1 [0126.847] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.847] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.853] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16ad2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.853] RtlGetLastWin32Error () returned 0x3e5 [0126.853] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.854] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x16ad2, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.855] RtlGetLastWin32Error () returned 0x3e5 [0126.855] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.855] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x16ad2, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.856] RtlGetLastWin32Error () returned 0x3e5 [0126.856] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.856] RtlGetLastWin32Error () returned 0x26 [0126.856] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.856] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.856] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.856] RtlGetLastWin32Error () returned 0x3e5 [0126.856] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.856] CloseHandle (hObject=0x3dc) returned 1 [0126.859] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x10c) returned 0x1183aa8 [0126.859] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\Knz17DKF_L6UW.mp4" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\knz17dkf_l6uw.mp4"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\Knz17DKF_L6UW.mp4.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\knz17dkf_l6uw.mp4.1yg4ztc5")) returned 1 [0126.860] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.860] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183aa8) returned 1 [0126.860] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.862] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.866] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe9ea, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.866] RtlGetLastWin32Error () returned 0x3e5 [0126.867] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.867] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xe9ea, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.868] RtlGetLastWin32Error () returned 0x3e5 [0126.868] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.868] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xe9ea, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.868] RtlGetLastWin32Error () returned 0x3e5 [0126.869] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.869] RtlGetLastWin32Error () returned 0x26 [0126.869] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.869] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.869] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.869] RtlGetLastWin32Error () returned 0x3e5 [0126.869] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.869] CloseHandle (hObject=0x3dc) returned 1 [0126.872] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183ab8 [0126.873] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\NsCf6g6DKIJANIzE2RT.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\nscf6g6dkijanize2rt.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\NsCf6g6DKIJANIzE2RT.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\nscf6g6dkijanize2rt.flv.1yg4ztc5")) returned 1 [0126.874] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.874] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab8) returned 1 [0126.874] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.874] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.878] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc6ec, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.879] RtlGetLastWin32Error () returned 0x3e5 [0126.879] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.879] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0xc6ec, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.880] RtlGetLastWin32Error () returned 0x3e5 [0126.880] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.880] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0xc6ec, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.880] RtlGetLastWin32Error () returned 0x3e5 [0126.880] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.881] RtlGetLastWin32Error () returned 0x26 [0126.881] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.881] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.881] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.881] RtlGetLastWin32Error () returned 0x3e5 [0126.881] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.881] CloseHandle (hObject=0x3dc) returned 1 [0126.883] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x118) returned 0x1183ab8 [0126.883] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\U0ec_M4przGLKk6Pxo1.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\u0ec_m4przglkk6pxo1.flv"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\U0ec_M4przGLKk6Pxo1.flv.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\u0ec_m4przglkk6pxo1.flv.1yg4ztc5")) returned 1 [0126.884] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.884] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183ab8) returned 1 [0126.884] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.885] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.889] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3142, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.889] RtlGetLastWin32Error () returned 0x3e5 [0126.889] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.889] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac*, nNumberOfBytesToWrite=0x3142, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.890] RtlGetLastWin32Error () returned 0x3e5 [0126.890] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.890] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bc8aac, nNumberOfBytesToRead=0x3142, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8aac, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bc8950) returned 0x0 [0126.890] RtlGetLastWin32Error () returned 0x3e5 [0126.890] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.890] RtlGetLastWin32Error () returned 0x26 [0126.890] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.890] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.890] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bc8978*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950 | out: lpBuffer=0x3bc8978*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bc8950) returned 1 [0126.891] RtlGetLastWin32Error () returned 0x3e5 [0126.891] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.891] CloseHandle (hObject=0x3dc) returned 1 [0126.897] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfa) returned 0x1183a98 [0126.897] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xTrZ.swf" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xtrz.swf"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xTrZ.swf.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\aqp9vri0bxjohappcij\\xtrz.swf.1yg4ztc5")) returned 1 [0126.898] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.898] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a98) returned 1 [0126.898] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bc8950) returned 1 [0126.898] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.907] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14643, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 1 [0126.907] RtlGetLastWin32Error () returned 0x3e5 [0126.907] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.908] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc*, nNumberOfBytesToWrite=0x14643, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.909] RtlGetLastWin32Error () returned 0x3e5 [0126.909] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.909] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bab2cc, nNumberOfBytesToRead=0x14643, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab2cc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3bab170) returned 0x0 [0126.909] RtlGetLastWin32Error () returned 0x3e5 [0126.909] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0126.909] RtlGetLastWin32Error () returned 0x26 [0126.909] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3bab170) returned 1 [0126.909] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.909] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bab198*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170 | out: lpBuffer=0x3bab198*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3bab170) returned 1 [0126.910] RtlGetLastWin32Error () returned 0x3e5 [0126.910] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0126.910] CloseHandle (hObject=0x3dc) returned 1 [0126.917] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0xfc) returned 0x1183a98 [0126.917] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hLo0.odt" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hlo0.odt"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hLo0.odt.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bfxp6 wq\\ke1a65mkp\\2hlo0.odt.1yg4ztc5")) returned 1 [0126.926] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a10) returned 1 [0126.926] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183a98) returned 1 [0126.926] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3bab170) returned 1 [0126.926] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0133.205] WriteFile (in: hFile=0x3d8, lpBuffer=0x3aca5fc*, nNumberOfBytesToWrite=0x42400, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3aca4a0 | out: lpBuffer=0x3aca5fc*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3aca4a0) returned 1 [0133.206] RtlGetLastWin32Error () returned 0x3e5 [0133.206] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0133.209] ReadFile (in: hFile=0x3d8, lpBuffer=0x3aca5fc, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x0, lpOverlapped=0x3aca4a0 | out: lpBuffer=0x3aca5fc, lpNumberOfBytesRead=0x0, lpOverlapped=0x3aca4a0) returned 0x0 [0133.209] RtlGetLastWin32Error () returned 0x3e5 [0133.209] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 0 [0133.209] RtlGetLastWin32Error () returned 0x26 [0133.209] PostQueuedCompletionStatus (CompletionPort=0x3a8, dwNumberOfBytesTransferred=0x0, dwCompletionKey=0x0, lpOverlapped=0x3aca4a0) returned 1 [0133.209] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0133.209] WriteFile (in: hFile=0x3d8, lpBuffer=0x3aca4c8*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3aca4a0 | out: lpBuffer=0x3aca4c8*, lpNumberOfBytesWritten=0x0, lpOverlapped=0x3aca4a0) returned 1 [0133.210] RtlGetLastWin32Error () returned 0x3e5 [0133.210] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 [0133.210] CloseHandle (hObject=0x3d8) returned 1 [0133.218] RtlAllocateHeap (HeapHandle=0xe00000, Flags=0x8, Size=0x108) returned 0x11837d8 [0133.218] MoveFileW (lpExistingFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), lpNewFileName="\\\\?\\c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst.1yg4ztc5" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst.1yg4ztc5")) returned 1 [0133.219] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x1183e00) returned 1 [0133.219] RtlFreeHeap (HeapHandle=0xe00000, Flags=0x0, BaseAddress=0x11837d8) returned 1 [0133.219] RtlFreeHeap (HeapHandle=0x37d0000, Flags=0x0, BaseAddress=0x3aca4a0) returned 1 [0133.227] GetQueuedCompletionStatus (in: CompletionPort=0x3a8, lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c, dwMilliseconds=0xffffffff | out: lpNumberOfBytesTransferred=0x3e5ff78, lpCompletionKey=0x3e5ff74, lpOverlapped=0x3e5ff7c) returned 1 Thread: id = 189 os_tid = 0xee8 Process: id = "3" image_name = "netsh.exe" filename = "c:\\windows\\syswow64\\netsh.exe" page_root = "0x63751000" os_pid = "0xb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xed4" cmd_line = "netsh advfirewall firewall set rule group=\"Network Discovery\" new enable=Yes" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f741" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 413 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 414 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 415 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 416 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 417 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 418 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 419 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 420 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 421 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 422 start_va = 0x1730000 end_va = 0x174dfff monitored = 1 entry_point = 0x1739980 region_type = mapped_file name = "netsh.exe" filename = "\\Windows\\SysWOW64\\netsh.exe" (normalized: "c:\\windows\\syswow64\\netsh.exe") Region: id = 423 start_va = 0x1750000 end_va = 0x574ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001750000" filename = "" Region: id = 424 start_va = 0x77150000 end_va = 0x772cafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 425 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 426 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 427 start_va = 0x7fff0000 end_va = 0x7dfc2f67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 428 start_va = 0x7dfc2f680000 end_va = 0x7ffc2f67ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfc2f680000" filename = "" Region: id = 429 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 430 start_va = 0x7ffc2f841000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffc2f841000" filename = "" Region: id = 433 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 434 start_va = 0x50860000 end_va = 0x508d9fff monitored = 0 entry_point = 0x50873290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 435 start_va = 0x508e0000 end_va = 0x5092ffff monitored = 0 entry_point = 0x508f8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 436 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 437 start_va = 0x50930000 end_va = 0x50937fff monitored = 0 entry_point = 0x509317c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 438 start_va = 0x500000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 439 start_va = 0x75520000 end_va = 0x755fffff monitored = 0 entry_point = 0x75533980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 440 start_va = 0x74830000 end_va = 0x749adfff monitored = 0 entry_point = 0x748e1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 441 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 442 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 1079 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1080 start_va = 0x73fc0000 end_va = 0x7407dfff monitored = 0 entry_point = 0x73ff5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1081 start_va = 0x500000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 1082 start_va = 0x540000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 1083 start_va = 0x670000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 1084 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1085 start_va = 0x74130000 end_va = 0x741c1fff monitored = 0 entry_point = 0x74168cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1086 start_va = 0x76a00000 end_va = 0x76bbcfff monitored = 0 entry_point = 0x76ae2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 1087 start_va = 0x73f00000 end_va = 0x73facfff monitored = 0 entry_point = 0x73f14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1088 start_va = 0x73e80000 end_va = 0x73e9dfff monitored = 0 entry_point = 0x73e8b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1089 start_va = 0x73e70000 end_va = 0x73e79fff monitored = 0 entry_point = 0x73e72a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1090 start_va = 0x747d0000 end_va = 0x74827fff monitored = 0 entry_point = 0x748125c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 1091 start_va = 0x751f0000 end_va = 0x75233fff monitored = 0 entry_point = 0x75209d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1092 start_va = 0x770000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1093 start_va = 0x770000 end_va = 0x859fff monitored = 0 entry_point = 0x7ad650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1094 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1095 start_va = 0x73fb0000 end_va = 0x73fbbfff monitored = 0 entry_point = 0x73fb3930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 1096 start_va = 0x6ee10000 end_va = 0x6ee1afff monitored = 0 entry_point = 0x6ee14150 region_type = mapped_file name = "ifmon.dll" filename = "\\Windows\\SysWOW64\\ifmon.dll" (normalized: "c:\\windows\\syswow64\\ifmon.dll") Region: id = 1097 start_va = 0x741d0000 end_va = 0x7422efff monitored = 0 entry_point = 0x741d4af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1098 start_va = 0x73ec0000 end_va = 0x73ef6fff monitored = 0 entry_point = 0x73ec3b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1099 start_va = 0x71490000 end_va = 0x714befff monitored = 0 entry_point = 0x7149bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1163 start_va = 0x6edc0000 end_va = 0x6ee0ffff monitored = 0 entry_point = 0x6ee013b0 region_type = mapped_file name = "rasmontr.dll" filename = "\\Windows\\SysWOW64\\rasmontr.dll" (normalized: "c:\\windows\\syswow64\\rasmontr.dll") Region: id = 1164 start_va = 0x74ed0000 end_va = 0x74f4afff monitored = 0 entry_point = 0x74eee970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1165 start_va = 0x742b0000 end_va = 0x743f6fff monitored = 0 entry_point = 0x742c1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1166 start_va = 0x752d0000 end_va = 0x7541efff monitored = 0 entry_point = 0x75386820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1167 start_va = 0x6ed40000 end_va = 0x6edb5fff monitored = 0 entry_point = 0x6eda36a0 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\SysWOW64\\mprapi.dll" (normalized: "c:\\windows\\syswow64\\mprapi.dll") Region: id = 1168 start_va = 0x6ec90000 end_va = 0x6ed34fff monitored = 0 entry_point = 0x6ecaac50 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 1169 start_va = 0x770000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1170 start_va = 0x7b0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 1171 start_va = 0x6f4e0000 end_va = 0x6f526fff monitored = 0 entry_point = 0x6f4f58d0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1172 start_va = 0x6eb50000 end_va = 0x6ec81fff monitored = 1 entry_point = 0x6eb8c0e0 region_type = mapped_file name = "mfc42u.dll" filename = "\\Windows\\SysWOW64\\mfc42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll") Region: id = 1173 start_va = 0x714e0000 end_va = 0x714fafff monitored = 0 entry_point = 0x714e9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 1174 start_va = 0x6eb20000 end_va = 0x6eb42fff monitored = 0 entry_point = 0x6eb25570 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 1175 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1176 start_va = 0x6ea80000 end_va = 0x6eb18fff monitored = 0 entry_point = 0x6eab8470 region_type = mapped_file name = "odbc32.dll" filename = "\\Windows\\SysWOW64\\odbc32.dll" (normalized: "c:\\windows\\syswow64\\odbc32.dll") Region: id = 1177 start_va = 0x6f3e0000 end_va = 0x6f3e7fff monitored = 0 entry_point = 0x6f3e1d70 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\SysWOW64\\dpapi.dll" (normalized: "c:\\windows\\syswow64\\dpapi.dll") Region: id = 1178 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1179 start_va = 0x8f0000 end_va = 0xa77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 1180 start_va = 0x770c0000 end_va = 0x770eafff monitored = 0 entry_point = 0x770c5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1181 start_va = 0xa80000 end_va = 0xc00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 1182 start_va = 0x5750000 end_va = 0x6b4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005750000" filename = "" Region: id = 1233 start_va = 0x30000 end_va = 0x34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netsh.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\netsh.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netsh.exe.mui") Region: id = 1235 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1236 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1238 start_va = 0xc10000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 1242 start_va = 0x1f0000 end_va = 0x1f7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mfc42u.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\MFC42u.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\mfc42u.dll.mui") Region: id = 1326 start_va = 0x6ea10000 end_va = 0x6ea6bfff monitored = 0 entry_point = 0x6ea586c0 region_type = mapped_file name = "authfwcfg.dll" filename = "\\Windows\\SysWOW64\\authfwcfg.dll" (normalized: "c:\\windows\\syswow64\\authfwcfg.dll") Region: id = 1464 start_va = 0x74400000 end_va = 0x7445dfff monitored = 0 entry_point = 0x74417470 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\SysWOW64\\FirewallAPI.dll" (normalized: "c:\\windows\\syswow64\\firewallapi.dll") Region: id = 1465 start_va = 0x6e9e0000 end_va = 0x6ea0cfff monitored = 0 entry_point = 0x6e9ec010 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\SysWOW64\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\syswow64\\fwpolicyiomgr.dll") Region: id = 1466 start_va = 0x72cb0000 end_va = 0x72cdbfff monitored = 0 entry_point = 0x72cc5ee0 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\SysWOW64\\fwbase.dll" (normalized: "c:\\windows\\syswow64\\fwbase.dll") Region: id = 1469 start_va = 0x6e9d0000 end_va = 0x6e9d6fff monitored = 0 entry_point = 0x6e9d2060 region_type = mapped_file name = "dhcpcmonitor.dll" filename = "\\Windows\\SysWOW64\\dhcpcmonitor.dll" (normalized: "c:\\windows\\syswow64\\dhcpcmonitor.dll") Region: id = 1470 start_va = 0x70a00000 end_va = 0x70a13fff monitored = 0 entry_point = 0x70a03c10 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1471 start_va = 0x70a20000 end_va = 0x70a32fff monitored = 0 entry_point = 0x70a225d0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 1472 start_va = 0x74ec0000 end_va = 0x74ec6fff monitored = 0 entry_point = 0x74ec1e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1474 start_va = 0x6e9b0000 end_va = 0x6e9c1fff monitored = 0 entry_point = 0x6e9bc8d0 region_type = mapped_file name = "dot3cfg.dll" filename = "\\Windows\\SysWOW64\\dot3cfg.dll" (normalized: "c:\\windows\\syswow64\\dot3cfg.dll") Region: id = 1478 start_va = 0x6e990000 end_va = 0x6e9a8fff monitored = 0 entry_point = 0x6e9a0530 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\SysWOW64\\dot3api.dll" (normalized: "c:\\windows\\syswow64\\dot3api.dll") Region: id = 1479 start_va = 0x6e950000 end_va = 0x6e989fff monitored = 0 entry_point = 0x6e978740 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\SysWOW64\\onex.dll" (normalized: "c:\\windows\\syswow64\\onex.dll") Region: id = 1480 start_va = 0x6e900000 end_va = 0x6e949fff monitored = 0 entry_point = 0x6e90a280 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\SysWOW64\\eappcfg.dll" (normalized: "c:\\windows\\syswow64\\eappcfg.dll") Region: id = 1481 start_va = 0x6e8e0000 end_va = 0x6e8f7fff monitored = 0 entry_point = 0x6e8e4820 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 1482 start_va = 0x6e8c0000 end_va = 0x6e8d0fff monitored = 0 entry_point = 0x6e8ca1f0 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\SysWOW64\\eappprxy.dll" (normalized: "c:\\windows\\syswow64\\eappprxy.dll") Region: id = 1483 start_va = 0x4c0000 end_va = 0x4c3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 1484 start_va = 0x6e8b0000 end_va = 0x6e8befff monitored = 0 entry_point = 0x6e8b92a0 region_type = mapped_file name = "fwcfg.dll" filename = "\\Windows\\SysWOW64\\fwcfg.dll" (normalized: "c:\\windows\\syswow64\\fwcfg.dll") Region: id = 1485 start_va = 0x6e8a0000 end_va = 0x6e8a7fff monitored = 0 entry_point = 0x6e8a28a0 region_type = mapped_file name = "hnetmon.dll" filename = "\\Windows\\SysWOW64\\hnetmon.dll" (normalized: "c:\\windows\\syswow64\\hnetmon.dll") Region: id = 1486 start_va = 0x6e600000 end_va = 0x6e891fff monitored = 0 entry_point = 0x6e60e710 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\SysWOW64\\netshell.dll" (normalized: "c:\\windows\\syswow64\\netshell.dll") Region: id = 1493 start_va = 0x744c0000 end_va = 0x74504fff monitored = 0 entry_point = 0x744dde90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1494 start_va = 0x75600000 end_va = 0x769fefff monitored = 0 entry_point = 0x757bb990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1495 start_va = 0x76bc0000 end_va = 0x770b8fff monitored = 0 entry_point = 0x76dc7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 1496 start_va = 0x740a0000 end_va = 0x7412cfff monitored = 0 entry_point = 0x740e9b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 1497 start_va = 0x74610000 end_va = 0x74653fff monitored = 0 entry_point = 0x74617410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 1498 start_va = 0x74290000 end_va = 0x7429efff monitored = 0 entry_point = 0x74292e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1499 start_va = 0x6e5e0000 end_va = 0x6e5f3fff monitored = 0 entry_point = 0x6e5e5a40 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1501 start_va = 0x6e5b0000 end_va = 0x6e5defff monitored = 0 entry_point = 0x6e5d3330 region_type = mapped_file name = "netiohlp.dll" filename = "\\Windows\\SysWOW64\\netiohlp.dll" (normalized: "c:\\windows\\syswow64\\netiohlp.dll") Region: id = 1503 start_va = 0x70970000 end_va = 0x709f3fff monitored = 0 entry_point = 0x70996530 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1504 start_va = 0x71390000 end_va = 0x71397fff monitored = 0 entry_point = 0x71391fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1505 start_va = 0x6e5a0000 end_va = 0x6e5aafff monitored = 0 entry_point = 0x6e5a6010 region_type = mapped_file name = "nshhttp.dll" filename = "\\Windows\\SysWOW64\\nshhttp.dll" (normalized: "c:\\windows\\syswow64\\nshhttp.dll") Region: id = 1506 start_va = 0x6e590000 end_va = 0x6e59afff monitored = 0 entry_point = 0x6e591b60 region_type = mapped_file name = "httpapi.dll" filename = "\\Windows\\SysWOW64\\httpapi.dll" (normalized: "c:\\windows\\syswow64\\httpapi.dll") Region: id = 1508 start_va = 0x6e520000 end_va = 0x6e582fff monitored = 0 entry_point = 0x6e576c70 region_type = mapped_file name = "nshipsec.dll" filename = "\\Windows\\SysWOW64\\nshipsec.dll" (normalized: "c:\\windows\\syswow64\\nshipsec.dll") Region: id = 1510 start_va = 0x75070000 end_va = 0x751e7fff monitored = 0 entry_point = 0x750c8a90 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1511 start_va = 0x74eb0000 end_va = 0x74ebdfff monitored = 0 entry_point = 0x74eb5410 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1512 start_va = 0x74510000 end_va = 0x74562fff monitored = 0 entry_point = 0x74530a10 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1515 start_va = 0x6e500000 end_va = 0x6e518fff monitored = 0 entry_point = 0x6e5047e0 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 1516 start_va = 0x6e4c0000 end_va = 0x6e4fafff monitored = 0 entry_point = 0x6e4c7e00 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\SysWOW64\\activeds.dll" (normalized: "c:\\windows\\syswow64\\activeds.dll") Region: id = 1832 start_va = 0x6e3f0000 end_va = 0x6e43afff monitored = 0 entry_point = 0x6e42fa00 region_type = mapped_file name = "polstore.dll" filename = "\\Windows\\SysWOW64\\polstore.dll" (normalized: "c:\\windows\\syswow64\\polstore.dll") Region: id = 1836 start_va = 0xc90000 end_va = 0xccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 1837 start_va = 0xcd0000 end_va = 0xdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 1838 start_va = 0x6e2d0000 end_va = 0x6e2e3fff monitored = 0 entry_point = 0x6e2de400 region_type = mapped_file name = "winipsec.dll" filename = "\\Windows\\SysWOW64\\winipsec.dll" (normalized: "c:\\windows\\syswow64\\winipsec.dll") Region: id = 1839 start_va = 0x6e290000 end_va = 0x6e2c7fff monitored = 0 entry_point = 0x6e2ad280 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\SysWOW64\\adsldpc.dll" (normalized: "c:\\windows\\syswow64\\adsldpc.dll") Region: id = 1840 start_va = 0x4d0000 end_va = 0x4d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 1843 start_va = 0x6e1e0000 end_va = 0x6e270fff monitored = 0 entry_point = 0x6e2520a0 region_type = mapped_file name = "nshwfp.dll" filename = "\\Windows\\SysWOW64\\nshwfp.dll" (normalized: "c:\\windows\\syswow64\\nshwfp.dll") Region: id = 1844 start_va = 0x6e1b0000 end_va = 0x6e1d0fff monitored = 0 entry_point = 0x6e1bbdb0 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\SysWOW64\\cabinet.dll" (normalized: "c:\\windows\\syswow64\\cabinet.dll") Region: id = 1846 start_va = 0xdd0000 end_va = 0xe4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1847 start_va = 0x6e160000 end_va = 0x6e190fff monitored = 0 entry_point = 0x6e187170 region_type = mapped_file name = "p2pnetsh.dll" filename = "\\Windows\\SysWOW64\\p2pnetsh.dll" (normalized: "c:\\windows\\syswow64\\p2pnetsh.dll") Region: id = 1848 start_va = 0x6e130000 end_va = 0x6e15ffff monitored = 0 entry_point = 0x6e154320 region_type = mapped_file name = "p2p.dll" filename = "\\Windows\\SysWOW64\\P2P.dll" (normalized: "c:\\windows\\syswow64\\p2p.dll") Region: id = 1992 start_va = 0x4e0000 end_va = 0x4e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 1993 start_va = 0x6e120000 end_va = 0x6e12afff monitored = 0 entry_point = 0x6e125490 region_type = mapped_file name = "rpcnsh.dll" filename = "\\Windows\\SysWOW64\\rpcnsh.dll" (normalized: "c:\\windows\\syswow64\\rpcnsh.dll") Region: id = 1994 start_va = 0x6e110000 end_va = 0x6e116fff monitored = 0 entry_point = 0x6e111e10 region_type = mapped_file name = "whhelper.dll" filename = "\\Windows\\SysWOW64\\whhelper.dll" (normalized: "c:\\windows\\syswow64\\whhelper.dll") Region: id = 1995 start_va = 0x713f0000 end_va = 0x7148afff monitored = 0 entry_point = 0x7142f7e0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\SysWOW64\\winhttp.dll" (normalized: "c:\\windows\\syswow64\\winhttp.dll") Region: id = 1996 start_va = 0x6e0d0000 end_va = 0x6e10cfff monitored = 0 entry_point = 0x6e1004f0 region_type = mapped_file name = "wlancfg.dll" filename = "\\Windows\\SysWOW64\\wlancfg.dll" (normalized: "c:\\windows\\syswow64\\wlancfg.dll") Region: id = 1997 start_va = 0x71180000 end_va = 0x71192fff monitored = 0 entry_point = 0x71189950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 2000 start_va = 0x6e080000 end_va = 0x6e0ccfff monitored = 0 entry_point = 0x6e08d930 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\SysWOW64\\wlanapi.dll" (normalized: "c:\\windows\\syswow64\\wlanapi.dll") Region: id = 2001 start_va = 0x6e050000 end_va = 0x6e079fff monitored = 0 entry_point = 0x6e06ee70 region_type = mapped_file name = "wifidisplay.dll" filename = "\\Windows\\SysWOW64\\WiFiDisplay.dll" (normalized: "c:\\windows\\syswow64\\wifidisplay.dll") Region: id = 2002 start_va = 0x6f610000 end_va = 0x6f631fff monitored = 0 entry_point = 0x6f6191f0 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 2005 start_va = 0x6e040000 end_va = 0x6e047fff monitored = 0 entry_point = 0x6e042d80 region_type = mapped_file name = "wshelper.dll" filename = "\\Windows\\SysWOW64\\wshelper.dll" (normalized: "c:\\windows\\syswow64\\wshelper.dll") Region: id = 2007 start_va = 0x713a0000 end_va = 0x713eefff monitored = 0 entry_point = 0x713ad850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 2009 start_va = 0xdd0000 end_va = 0xe0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 2010 start_va = 0xe40000 end_va = 0xe4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e40000" filename = "" Region: id = 2011 start_va = 0xe50000 end_va = 0xf4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e50000" filename = "" Region: id = 2012 start_va = 0x6dff0000 end_va = 0x6e03cfff monitored = 0 entry_point = 0x6e006930 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\SysWOW64\\wevtapi.dll" (normalized: "c:\\windows\\syswow64\\wevtapi.dll") Region: id = 2013 start_va = 0x6df90000 end_va = 0x6dfeafff monitored = 0 entry_point = 0x6dfddbe0 region_type = mapped_file name = "peerdistsh.dll" filename = "\\Windows\\SysWOW64\\PeerDistSh.dll" (normalized: "c:\\windows\\syswow64\\peerdistsh.dll") Region: id = 2016 start_va = 0x6df80000 end_va = 0x6df88fff monitored = 0 entry_point = 0x6df81310 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\SysWOW64\\ktmw32.dll" (normalized: "c:\\windows\\syswow64\\ktmw32.dll") Region: id = 2020 start_va = 0x72c30000 end_va = 0x72ca4fff monitored = 0 entry_point = 0x72c69a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2021 start_va = 0xf50000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 2023 start_va = 0x640000 end_va = 0x650fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fwcfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\fwcfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\fwcfg.dll.mui") Region: id = 2024 start_va = 0xf50000 end_va = 0xf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f50000" filename = "" Region: id = 2025 start_va = 0x1030000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 2026 start_va = 0x1040000 end_va = 0x113ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 2027 start_va = 0x660000 end_va = 0x669fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "p2pnetsh.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\p2pnetsh.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\p2pnetsh.dll.mui") Region: id = 2028 start_va = 0x6df60000 end_va = 0x6df7afff monitored = 0 entry_point = 0x6df65020 region_type = mapped_file name = "wcmapi.dll" filename = "\\Windows\\SysWOW64\\wcmapi.dll" (normalized: "c:\\windows\\syswow64\\wcmapi.dll") Region: id = 2029 start_va = 0x6df40000 end_va = 0x6df5efff monitored = 0 entry_point = 0x6df4c120 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\SysWOW64\\rmclient.dll" (normalized: "c:\\windows\\syswow64\\rmclient.dll") Region: id = 2030 start_va = 0xf90000 end_va = 0xfcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 2031 start_va = 0x1140000 end_va = 0x123ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001140000" filename = "" Region: id = 2032 start_va = 0x6df20000 end_va = 0x6df3efff monitored = 0 entry_point = 0x6df28a90 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\SysWOW64\\gpapi.dll" (normalized: "c:\\windows\\syswow64\\gpapi.dll") Region: id = 2033 start_va = 0x1240000 end_va = 0x133ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 2034 start_va = 0x1340000 end_va = 0x1676fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2116 start_va = 0xfd0000 end_va = 0x1013fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fd0000" filename = "" Region: id = 2117 start_va = 0x6b50000 end_va = 0x6c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b50000" filename = "" Region: id = 2118 start_va = 0x8b0000 end_va = 0x8d3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\firewallapi.dll.mui") Region: id = 2119 start_va = 0x6f080000 end_va = 0x6f14ffff monitored = 0 entry_point = 0x6f0e5b20 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\SysWOW64\\MrmCoreR.dll" (normalized: "c:\\windows\\syswow64\\mrmcorer.dll") Region: id = 2120 start_va = 0x73b00000 end_va = 0x73dcafff monitored = 0 entry_point = 0x73d3c4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 2121 start_va = 0x6dec0000 end_va = 0x6df11fff monitored = 0 entry_point = 0x6dee8290 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\SysWOW64\\BCP47Langs.dll" (normalized: "c:\\windows\\syswow64\\bcp47langs.dll") Region: id = 2122 start_va = 0xe10000 end_va = 0xe10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e10000" filename = "" Region: id = 2123 start_va = 0x75240000 end_va = 0x752c3fff monitored = 0 entry_point = 0x75266220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 2124 start_va = 0x6ca20000 end_va = 0x6ca9afff monitored = 0 entry_point = 0x6ca5a540 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\SysWOW64\\Windows.UI.dll" (normalized: "c:\\windows\\syswow64\\windows.ui.dll") Region: id = 2125 start_va = 0xfd0000 end_va = 0xffdfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000fd0000" filename = "" Region: id = 2126 start_va = 0xe20000 end_va = 0xe26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 2127 start_va = 0x6c50000 end_va = 0x6d2efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") Region: id = 2130 start_va = 0x1680000 end_va = 0x16ecfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") Region: id = 2131 start_va = 0x1680000 end_va = 0x16fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") Region: id = 2132 start_va = 0x1680000 end_va = 0x1720fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") Region: id = 2133 start_va = 0xe30000 end_va = 0xe36fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1560258661-3990802383-1811730007-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri") Region: id = 2134 start_va = 0x1000000 end_va = 0x1026fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri") Region: id = 2136 start_va = 0xe30000 end_va = 0xe3cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1560258661-3990802383-1811730007-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.people_10.0.2840.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri") Region: id = 2137 start_va = 0x1680000 end_va = 0x16bbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.people_10.0.2840.0_x64__8wekyb3d8bbwe\\resources.pri") Region: id = 2138 start_va = 0x1000000 end_va = 0x1013fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1560258661-3990802383-1811730007-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri") Region: id = 2139 start_va = 0x1680000 end_va = 0x1703fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\resources.pri") Region: id = 2140 start_va = 0xe30000 end_va = 0xe3bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1560258661-3990802383-1811730007-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1560258661-3990802383-1811730007-1000-mergedresources-0.pri") Region: id = 2141 start_va = 0x1680000 end_va = 0x16f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\resources.pri") Region: id = 2142 start_va = 0x6c50000 end_va = 0x6d7cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsphone_10.1510.9010.0_x64__8wekyb3d8bbwe\\resources.pri") Region: id = 2143 start_va = 0xe30000 end_va = 0xe30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\PurchaseDialog\\resources.pri" (normalized: "c:\\windows\\purchasedialog\\resources.pri") Region: id = 2144 start_va = 0x1000000 end_va = 0x1000fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "2503989003.pri" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\559726144\\2503989003.pri" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\559726144\\2503989003.pri") Region: id = 2145 start_va = 0x1010000 end_va = 0x1010fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\PurchaseDialog\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\purchasedialog\\pris\\resources.en-us.pri") Region: id = 2146 start_va = 0xe30000 end_va = 0xe32fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\resources.pri") Region: id = 2147 start_va = 0x1000000 end_va = 0x1002fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "1482632376.pri" filename = "\\Windows\\rescache\\_merged\\3566141862\\1482632376.pri" (normalized: "c:\\windows\\rescache\\_merged\\3566141862\\1482632376.pri") Region: id = 2148 start_va = 0x1010000 end_va = 0x1013fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2149 start_va = 0xe30000 end_va = 0xe33fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\resources.pri") Region: id = 2150 start_va = 0x1000000 end_va = 0x1004fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "3742713944.pri" filename = "\\Windows\\rescache\\_merged\\3776882861\\3742713944.pri" (normalized: "c:\\windows\\rescache\\_merged\\3776882861\\3742713944.pri") Region: id = 2151 start_va = 0x1010000 end_va = 0x1017fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2152 start_va = 0xe30000 end_va = 0xe30fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\ParentalControls_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\parentalcontrols_cw5n1h2txyewy\\resources.pri") Region: id = 2153 start_va = 0x1000000 end_va = 0x1000fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "1459802635.pri" filename = "\\Windows\\rescache\\_merged\\2761276272\\1459802635.pri" (normalized: "c:\\windows\\rescache\\_merged\\2761276272\\1459802635.pri") Region: id = 2154 start_va = 0x1010000 end_va = 0x1010fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\ParentalControls_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\parentalcontrols_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2155 start_va = 0xe30000 end_va = 0xe31fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\resources.pri") Region: id = 2156 start_va = 0x1000000 end_va = 0x1000fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "1262775842.pri" filename = "\\Windows\\rescache\\_merged\\2367251010\\1262775842.pri" (normalized: "c:\\windows\\rescache\\_merged\\2367251010\\1262775842.pri") Region: id = 2159 start_va = 0x1010000 end_va = 0x1010fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2160 start_va = 0xe30000 end_va = 0xe39fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.LockApp_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.lockapp_cw5n1h2txyewy\\resources.pri") Region: id = 2161 start_va = 0x1000000 end_va = 0x1000fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "3258762172.pri" filename = "\\Windows\\rescache\\_merged\\4239500072\\3258762172.pri" (normalized: "c:\\windows\\rescache\\_merged\\4239500072\\3258762172.pri") Region: id = 2162 start_va = 0x1010000 end_va = 0x1010fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.LockApp_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.lockapp_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2163 start_va = 0x1680000 end_va = 0x16bafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.AccountsControl_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.accountscontrol_cw5n1h2txyewy\\resources.pri") Region: id = 2164 start_va = 0xe30000 end_va = 0xe33fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "1985177101.pri" filename = "\\Windows\\rescache\\_merged\\2279432890\\1985177101.pri" (normalized: "c:\\windows\\rescache\\_merged\\2279432890\\1985177101.pri") Region: id = 2165 start_va = 0x1000000 end_va = 0x1005fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.AccountsControl_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.accountscontrol_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2166 start_va = 0x1000000 end_va = 0x101efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\resources.pri") Region: id = 2167 start_va = 0x1680000 end_va = 0x1695fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "4188878962.pri" filename = "\\Windows\\rescache\\_merged\\1785344109\\4188878962.pri" (normalized: "c:\\windows\\rescache\\_merged\\1785344109\\4188878962.pri") Region: id = 2168 start_va = 0x16a0000 end_va = 0x16b8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2424 start_va = 0xe30000 end_va = 0xe32fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\resources.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\resources.pri") Region: id = 2425 start_va = 0x1000000 end_va = 0x1002fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "4043810879.pri" filename = "\\Windows\\rescache\\_merged\\4265960886\\4043810879.pri" (normalized: "c:\\windows\\rescache\\_merged\\4265960886\\4043810879.pri") Region: id = 2426 start_va = 0x1010000 end_va = 0x1013fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "resources.en-us.pri" filename = "\\Windows\\SystemApps\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\pris\\resources.en-US.pri" (normalized: "c:\\windows\\systemapps\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\pris\\resources.en-us.pri") Region: id = 2427 start_va = 0xe30000 end_va = 0xe3afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peerdistsh.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\PeerDistSh.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\peerdistsh.dll.mui") Region: id = 2428 start_va = 0x1000000 end_va = 0x1001fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "provsvc.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\provsvc.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\provsvc.dll.mui") Region: id = 2429 start_va = 0x1680000 end_va = 0x16e0fff monitored = 0 entry_point = 0x168cba0 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\SysWOW64\\provsvc.dll" (normalized: "c:\\windows\\syswow64\\provsvc.dll") Region: id = 2432 start_va = 0x1000000 end_va = 0x1003fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netlogon.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\netlogon.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\netlogon.dll.mui") Region: id = 2433 start_va = 0x6c50000 end_va = 0x6d03fff monitored = 0 entry_point = 0x6cacb10 region_type = mapped_file name = "netlogon.dll" filename = "\\Windows\\SysWOW64\\netlogon.dll" (normalized: "c:\\windows\\syswow64\\netlogon.dll") Region: id = 2476 start_va = 0xc90000 end_va = 0xcbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "authfwcfg.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\authfwcfg.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\authfwcfg.dll.mui") Thread: id = 10 os_tid = 0x910 [0108.542] GetModuleHandleA (lpModuleName=0x0) returned 0x1730000 [0108.542] __set_app_type (_Type=0x1) [0108.542] __p__fmode () returned 0x74074d6c [0108.542] __p__commode () returned 0x74075b1c [0108.542] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x1739bb0) returned 0x0 [0108.542] __wgetmainargs (in: _Argc=0x17433e8, _Argv=0x17433ec, _Env=0x17433f0, _DoWildCard=0, _StartInfo=0x17433fc | out: _Argc=0x17433e8, _Argv=0x17433ec, _Env=0x17433f0) returned 0 [0108.543] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0108.543] GetModuleHandleW (lpModuleName=0x0) returned 0x1730000 [0108.543] _vsnwprintf (in: _Buffer=0x1744ae0, _BufferCount=0x1fff, _Format="%s>", _ArgList=0x197af0 | out: _Buffer="netsh>") returned 6 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x670598 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676b08 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x677168 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676da0 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676db0 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678588 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678598 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6785a8 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6785b8 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676b68 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676b78 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676b88 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676b98 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676ba8 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x676bb8 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e60 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e70 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d00 [0108.544] GetProcessHeap () returned 0x670000 [0108.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d60 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678df0 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d30 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678cc0 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e40 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e00 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ca0 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d90 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678cb0 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678cd0 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d20 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e50 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e20 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e10 [0108.545] GetProcessHeap () returned 0x670000 [0108.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678e30 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d40 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d70 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d50 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d80 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678dc0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678da0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ce0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678cf0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678db0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678d10 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678dd0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678de0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f30 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679080 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678eb0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f70 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678fd0 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f00 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679090 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f20 [0108.546] GetProcessHeap () returned 0x670000 [0108.546] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f10 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f40 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679060 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f50 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679000 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ec0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f60 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f80 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790a0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ed0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679010 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678fc0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ee0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678f90 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678fa0 [0108.547] GetProcessHeap () returned 0x670000 [0108.547] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678fe0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678fb0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ff0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x678ef0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679020 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679030 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679040 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679050 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679070 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679220 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790e0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679250 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679270 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790b0 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679240 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679100 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679120 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679110 [0108.548] GetProcessHeap () returned 0x670000 [0108.548] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790c0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790d0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679230 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679200 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679130 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679260 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6790f0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791f0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679140 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679160 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679150 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679170 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679180 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679190 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791a0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791b0 [0108.549] GetProcessHeap () returned 0x670000 [0108.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791c0 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679210 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791d0 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6791e0 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794b8 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795f8 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679638 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679608 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679538 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795d8 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795c8 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679548 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679598 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679618 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679558 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679578 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679648 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794c8 [0108.550] GetProcessHeap () returned 0x670000 [0108.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679628 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679658 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679668 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679678 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794d8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795b8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679528 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794e8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679588 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794f8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679518 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679508 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679568 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795a8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6795e8 [0108.551] GetProcessHeap () returned 0x670000 [0108.551] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679348 [0108.551] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793d8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6794a8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679388 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679498 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679378 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6792b8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793e8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793a8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6792d8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793f8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6792c8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679358 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679338 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679368 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679458 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679398 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6792f8 [0108.552] GetProcessHeap () returned 0x670000 [0108.552] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793b8 [0108.552] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679468 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679308 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679478 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679448 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679438 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679428 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679318 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679408 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679418 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679328 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6793c8 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679488 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6792e8 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a50 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6798e0 [0108.553] GetProcessHeap () returned 0x670000 [0108.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679910 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a00 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799f0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a40 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6798c0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a30 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6798d0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a80 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799b0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a60 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6798f0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a70 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679900 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679920 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679930 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679940 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679950 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679960 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a10 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799c0 [0108.554] GetProcessHeap () returned 0x670000 [0108.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679990 [0108.554] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679970 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679980 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679a20 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799a0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799d0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6799e0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679770 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6796d0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6796f0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6798a0 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679740 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679720 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679850 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679730 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679700 [0108.555] GetProcessHeap () returned 0x670000 [0108.555] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679810 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6796e0 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679820 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x6796c0 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679870 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x679830 [0108.556] _wcsicmp (_String1="netsh.exe", _String2="ipxmontr.dll") returned 5 [0108.556] _wcsicmp (_String1="netsh.exe", _String2="ipxpromn.dll") returned 5 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x676798 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2) returned 0x679880 [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x6767b8 [0108.556] _wcsupr (in: _String="netsh.exe" | out: _String="NETSH.EXE") returned="NETSH.EXE" [0108.556] GetProcessHeap () returned 0x670000 [0108.556] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0108.557] GetProcessHeap () returned 0x670000 [0108.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x676530 [0108.557] GetProcessHeap () returned 0x670000 [0108.557] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0108.557] GetProcessHeap () returned 0x670000 [0108.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x6766d0 [0108.557] GetProcessHeap () returned 0x670000 [0108.557] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676530) returned 1 [0108.557] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x73fb0000 [0108.560] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\NetSh", ulOptions=0x0, samDesired=0x20019, phkResult=0x197ae8 | out: phkResult=0x197ae8*=0xcc) returned 0x0 [0108.560] RegQueryInfoKeyW (in: hKey=0xcc, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x197ae4*=0x11, lpcbMaxValueNameLen=0x197adc, lpcbMaxValueLen=0x197ae0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0108.560] GetProcessHeap () returned 0x670000 [0108.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x16) returned 0x676588 [0108.560] GetProcessHeap () returned 0x670000 [0108.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x8, Size=0x23) returned 0x677058 [0108.560] RegEnumValueW (in: hKey=0xcc, dwIndex=0x0, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="2", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0108.560] _wcsicmp (_String1="ifmon.dll", _String2="ipxmontr.dll") returned -10 [0108.560] _wcsicmp (_String1="ifmon.dll", _String2="ipxpromn.dll") returned -10 [0108.560] GetProcessHeap () returned 0x670000 [0108.560] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x672710 [0108.561] GetProcessHeap () returned 0x670000 [0108.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x679710 [0108.561] GetProcessHeap () returned 0x670000 [0108.561] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x672740 [0108.561] _wcsupr (in: _String="ifmon.dll" | out: _String="IFMON.DLL") returned="IFMON.DLL" [0108.561] GetProcessHeap () returned 0x670000 [0108.561] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676798) returned 1 [0108.561] LoadLibraryExW (lpLibFileName="IFMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ee10000 [0109.343] GetProcAddress (hModule=0x6ee10000, lpProcName="InitHelperDll") returned 0x6ee11ab0 [0109.343] InitHelperDll () returned 0x0 [0109.352] RegisterHelper () returned 0x0 [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x6812a0 [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6766d0) returned 1 [0109.356] RegEnumValueW (in: hKey=0xcc, dwIndex=0x1, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="4", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0109.356] _wcsicmp (_String1="rasmontr.dll", _String2="ipxmontr.dll") returned 9 [0109.356] _wcsicmp (_String1="rasmontr.dll", _String2="ipxpromn.dll") returned 9 [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3c) returned 0x679ca0 [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x679790 [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x6800c0 [0109.356] _wcsupr (in: _String="rasmontr.dll" | out: _String="RASMONTR.DLL") returned="RASMONTR.DLL" [0109.356] GetProcessHeap () returned 0x670000 [0109.356] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x672710) returned 1 [0109.356] LoadLibraryExW (lpLibFileName="RASMONTR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6edc0000 [0113.186] LoadLibraryExA (lpLibFileName="MSVCRT.DLL", hFile=0x0, dwFlags=0x800) returned 0x73fc0000 [0113.187] GetVersion () returned 0x295a000a [0113.187] SetErrorMode (uMode=0x0) returned 0x1 [0113.187] SetErrorMode (uMode=0x8001) returned 0x0 [0113.187] LocalAlloc (uFlags=0x0, uBytes=0x2000) returned 0x685288 [0113.187] LocalFree (hMem=0x685288) returned 0x0 [0113.188] GetVersion () returned 0x295a000a [0113.190] GlobalLock (hMem=0xc10004) returned 0x685288 [0113.191] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x685398 [0113.191] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x681fe8 [0113.191] LocalAlloc (uFlags=0x0, uBytes=0x8) returned 0x6798b0 [0113.191] malloc (_Size=0x80) returned 0x8e3948 [0113.192] __dllonexit () returned 0x6eb96fa0 [0113.192] __dllonexit () returned 0x6eb96f40 [0113.192] __dllonexit () returned 0x6eb96f60 [0113.192] __dllonexit () returned 0x6eb96f80 [0113.192] __dllonexit () returned 0x6eb71650 [0113.192] __dllonexit () returned 0x6eb71640 [0113.192] __dllonexit () returned 0x6eb71680 [0113.192] __dllonexit () returned 0x6eb716d0 [0113.193] __dllonexit () returned 0x6eb717b0 [0113.193] __dllonexit () returned 0x6eb717d0 [0113.193] __dllonexit () returned 0x6eb71830 [0113.193] __dllonexit () returned 0x6eb718f0 [0113.193] __dllonexit () returned 0x6eb71700 [0113.193] __dllonexit () returned 0x6eb97000 [0113.193] __dllonexit () returned 0x6eb71720 [0113.193] __dllonexit () returned 0x6eb718a0 [0113.193] __dllonexit () returned 0x6eb718c0 [0113.194] __dllonexit () returned 0x6eb71910 [0113.194] __dllonexit () returned 0x6eb71950 [0113.194] __dllonexit () returned 0x6eb71940 [0113.194] __dllonexit () returned 0x6eb71970 [0113.194] __dllonexit () returned 0x6eb71990 [0113.194] __dllonexit () returned 0x6eb719c0 [0113.194] __dllonexit () returned 0x6eb71a40 [0113.194] __dllonexit () returned 0x6eb71560 [0113.194] __dllonexit () returned 0x6eb71570 [0113.194] __dllonexit () returned 0x6eb71550 [0113.196] RegisterClipboardFormatW (lpszFormat="commctrl_DragListMsg") returned 0xc1de [0113.196] __dllonexit () returned 0x6eb96fe0 [0113.196] __dllonexit () returned 0x6eb96fc0 [0113.196] __dllonexit () returned 0x6eb96ff0 [0113.196] __dllonexit () returned 0x6eb96fd0 [0113.196] GetVersion () returned 0x295a000a [0113.196] GetVersion () returned 0x295a000a [0113.196] GetVersion () returned 0x295a000a [0113.197] __dllonexit () returned 0x6eb8a5a0 [0113.197] __dllonexit () returned 0x6eb8a5c0 [0113.197] __dllonexit () returned 0x6eb71740 [0113.197] __dllonexit () returned 0x6eb717f0 [0113.197] __dllonexit () returned 0x6eb71800 [0113.197] __dllonexit () returned 0x6eb8a3b0 [0113.197] GetVersion () returned 0x295a000a [0113.197] GetProcessVersion (ProcessId=0x0) returned 0xa0000 [0113.198] GetSystemMetrics (nIndex=11) returned 32 [0113.198] GetSystemMetrics (nIndex=12) returned 32 [0113.198] GetSystemMetrics (nIndex=2) returned 17 [0113.198] GetSystemMetrics (nIndex=3) returned 17 [0113.198] GetDC (hWnd=0x0) returned 0x4201069e [0113.198] GetDeviceCaps (hdc=0x4201069e, index=88) returned 96 [0113.198] GetDeviceCaps (hdc=0x4201069e, index=90) returned 96 [0113.198] ReleaseDC (hWnd=0x0, hDC=0x4201069e) returned 1 [0113.198] GetSysColor (nIndex=15) returned 0xf0f0f0 [0113.198] GetSysColor (nIndex=16) returned 0xa0a0a0 [0113.198] GetSysColor (nIndex=20) returned 0xffffff [0113.198] GetSysColor (nIndex=18) returned 0x0 [0113.198] GetSysColor (nIndex=6) returned 0x646464 [0113.198] GetSysColorBrush (nIndex=15) returned 0x1100074 [0113.198] GetSysColorBrush (nIndex=6) returned 0x110007c [0113.198] LoadCursorW (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0113.199] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0113.199] __dllonexit () returned 0x6eb71870 [0113.199] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc1dd [0113.199] __dllonexit () returned 0x6eb8a3a0 [0113.199] RegisterClipboardFormatW (lpszFormat="Native") returned 0xc004 [0113.230] RegisterClipboardFormatW (lpszFormat="OwnerLink") returned 0xc003 [0113.230] RegisterClipboardFormatW (lpszFormat="ObjectLink") returned 0xc002 [0113.230] RegisterClipboardFormatW (lpszFormat="Embedded Object") returned 0xc00a [0113.230] RegisterClipboardFormatW (lpszFormat="Embed Source") returned 0xc00b [0113.230] RegisterClipboardFormatW (lpszFormat="Link Source") returned 0xc00d [0113.230] RegisterClipboardFormatW (lpszFormat="Object Descriptor") returned 0xc00e [0113.230] RegisterClipboardFormatW (lpszFormat="Link Source Descriptor") returned 0xc00f [0113.230] RegisterClipboardFormatW (lpszFormat="FileName") returned 0xc006 [0113.230] RegisterClipboardFormatW (lpszFormat="FileNameW") returned 0xc007 [0113.230] RegisterClipboardFormatW (lpszFormat="Rich Text Format") returned 0xc0dd [0113.230] RegisterClipboardFormatW (lpszFormat="RichEdit Text and Objects") returned 0xc0e6 [0113.231] RegisterClipboardFormatW (lpszFormat="commdlg_FindReplace") returned 0xc1dd [0113.231] __dllonexit () returned 0x6eb97010 [0113.231] __dllonexit () returned 0x6eb97030 [0113.231] __dllonexit () returned 0x6eb97040 [0113.232] __dllonexit () returned 0x6eb97050 [0113.232] __dllonexit () returned 0x6eb97060 [0113.232] GetCursorPos (in: lpPoint=0x6ec58298 | out: lpPoint=0x6ec58298*(x=568, y=630)) returned 1 [0113.232] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x685518 [0113.233] LocalReAlloc (hMem=0x6798b0, uBytes=0xc, uFlags=0x2) returned 0x676a28 [0113.233] GetCurrentThread () returned 0xfffffffe [0113.233] GetCurrentThreadId () returned 0x910 [0113.233] __dllonexit () returned 0x6eb71a50 [0113.234] SetErrorMode (uMode=0x0) returned 0x8001 [0113.234] SetErrorMode (uMode=0x8001) returned 0x0 [0113.235] GetModuleFileNameW (in: hModule=0x6eb50000, lpFilename=0x1972e0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\MFC42u.dll" (normalized: "c:\\windows\\syswow64\\mfc42u.dll")) returned 0x1e [0113.235] wcscpy_s (in: _Destination=0x1970d8, _SizeInWords=0x104, _Source="MFC42u" | out: _Destination="MFC42u") returned 0x0 [0113.235] FindResourceW (hModule=0x6eb50000, lpName=0xe01, lpType=0x6) returned 0x1f0db0 [0113.264] LoadStringW (in: hInstance=0x6eb50000, uID=0xe000, lpBuffer=0x196ed8, cchBufferMax=256 | out: lpBuffer="") returned 0x0 [0113.264] wcscpy_s (in: _Destination=0x197314, _SizeInWords=0x5, _Source=".HLP" | out: _Destination=".HLP") returned 0x0 [0113.264] wcscat_s (in: _Destination="MFC42u", _SizeInWords=0x104, _Source=".INI" | out: _Destination="MFC42u.INI") returned 0x0 [0113.266] malloc (_Size=0x40) returned 0x8e3ad0 [0113.266] LocalAlloc (uFlags=0x40, uBytes=0x2090) returned 0x6855a8 [0113.266] GetSystemDirectoryA (in: lpBuffer=0x19752c, uSize=0x112 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0113.266] strcat_s (in: _Destination="C:\\Windows\\system32", _SizeInBytes=0x112, _Source="\\MFC42" | out: _Destination="C:\\Windows\\system32\\MFC42") returned 0x0 [0113.266] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42", _SizeInBytes=0x112, _Source="LOC" | out: _Destination="C:\\Windows\\system32\\MFC42LOC") returned 0x0 [0113.266] strcat_s (in: _Destination="C:\\Windows\\system32\\MFC42LOC", _SizeInBytes=0x112, _Source=".DLL" | out: _Destination="C:\\Windows\\system32\\MFC42LOC.DLL") returned 0x0 [0113.266] LoadLibraryExA (lpLibFileName="C:\\Windows\\system32\\MFC42LOC.DLL", hFile=0x0, dwFlags=0x2) returned 0x0 [0113.271] GetProcAddress (hModule=0x6edc0000, lpProcName="InitHelperDll") returned 0x6ede45a0 [0113.272] InitHelperDll () returned 0x0 [0113.272] RegisterHelper () returned 0x0 [0113.272] GetProcessHeap () returned 0x670000 [0113.272] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x6816d0 [0113.273] GetProcessHeap () returned 0x670000 [0113.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6812a0) returned 1 [0113.273] RegisterHelper () returned 0x0 [0113.273] GetProcessHeap () returned 0x670000 [0113.273] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x168) returned 0x682240 [0113.273] GetProcessHeap () returned 0x670000 [0113.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6816d0) returned 1 [0113.434] RegisterHelper () returned 0x0 [0113.434] GetProcessHeap () returned 0x670000 [0113.434] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1b0) returned 0x687e48 [0113.434] GetProcessHeap () returned 0x670000 [0113.434] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x682240) returned 1 [0113.435] RegisterHelper () returned 0x0 [0113.435] GetProcessHeap () returned 0x670000 [0113.435] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1f8) returned 0x688000 [0113.435] GetProcessHeap () returned 0x670000 [0113.435] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0113.435] RegisterHelper () returned 0x0 [0113.435] GetProcessHeap () returned 0x670000 [0113.435] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x240) returned 0x688200 [0113.435] GetProcessHeap () returned 0x670000 [0113.435] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688000) returned 1 [0113.435] RegEnumValueW (in: hKey=0xcc, dwIndex=0x2, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="authfwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0113.435] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxmontr.dll") returned -8 [0113.435] _wcsicmp (_String1="authfwcfg.dll", _String2="ipxpromn.dll") returned -8 [0113.435] GetProcessHeap () returned 0x670000 [0113.435] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x50) returned 0x6818f0 [0113.435] GetProcessHeap () returned 0x670000 [0113.436] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x688550 [0113.436] GetProcessHeap () returned 0x670000 [0113.436] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1c) returned 0x680160 [0113.436] _wcsupr (in: _String="authfwcfg.dll" | out: _String="AUTHFWCFG.DLL") returned="AUTHFWCFG.DLL" [0113.436] GetProcessHeap () returned 0x670000 [0113.436] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679ca0) returned 1 [0113.436] LoadLibraryExW (lpLibFileName="AUTHFWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6ea10000 [0115.344] GetProcAddress (hModule=0x6ea10000, lpProcName="InitHelperDll") returned 0x6ea13c40 [0115.345] InitHelperDll () returned 0x0 [0115.349] RegisterHelper () returned 0x0 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x288) returned 0x687e48 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688200) returned 1 [0115.349] RegisterHelper () returned 0x0 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2d0) returned 0x6880d8 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0115.349] RegisterHelper () returned 0x0 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x318) returned 0x689060 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6880d8) returned 1 [0115.349] RegisterHelper () returned 0x0 [0115.349] GetProcessHeap () returned 0x670000 [0115.349] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x360) returned 0x687e48 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x689060) returned 1 [0115.350] RegisterHelper () returned 0x0 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3a8) returned 0x689060 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0115.350] RegEnumValueW (in: hKey=0xcc, dwIndex=0x3, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="dhcpclient", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0115.350] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxmontr.dll") returned -5 [0115.350] _wcsicmp (_String1="dhcpcmonitor.dll", _String2="ipxpromn.dll") returned -5 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x64) returned 0x681be0 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16) returned 0x688530 [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x22) returned 0x680678 [0115.350] _wcsupr (in: _String="dhcpcmonitor.dll" | out: _String="DHCPCMONITOR.DLL") returned="DHCPCMONITOR.DLL" [0115.350] GetProcessHeap () returned 0x670000 [0115.350] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6818f0) returned 1 [0115.350] LoadLibraryExW (lpLibFileName="DHCPCMONITOR.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e9d0000 [0116.169] GetProcAddress (hModule=0x6e9d0000, lpProcName="InitHelperDll") returned 0x6e9d1a10 [0116.169] InitHelperDll () returned 0x0 [0116.169] RegisterHelper () returned 0x0 [0116.169] GetProcessHeap () returned 0x670000 [0116.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3f0) returned 0x687e48 [0116.170] GetProcessHeap () returned 0x670000 [0116.170] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x689060) returned 1 [0116.170] RegEnumValueW (in: hKey=0xcc, dwIndex=0x4, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="dot3cfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0116.170] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxmontr.dll") returned -5 [0116.170] _wcsicmp (_String1="dot3cfg.dll", _String2="ipxpromn.dll") returned -5 [0116.170] GetProcessHeap () returned 0x670000 [0116.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x78) returned 0x67ac30 [0116.170] GetProcessHeap () returned 0x670000 [0116.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x6888f8 [0116.170] GetProcessHeap () returned 0x670000 [0116.170] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x688470 [0116.170] _wcsupr (in: _String="dot3cfg.dll" | out: _String="DOT3CFG.DLL") returned="DOT3CFG.DLL" [0116.170] GetProcessHeap () returned 0x670000 [0116.170] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x681be0) returned 1 [0116.170] LoadLibraryExW (lpLibFileName="DOT3CFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e9b0000 [0117.500] GetProcAddress (hModule=0x6e9b0000, lpProcName="InitHelperDll") returned 0x6e9b3aa0 [0117.500] InitHelperDll () returned 0x0 [0117.500] RegisterHelper () returned 0x0 [0117.500] GetProcessHeap () returned 0x670000 [0117.500] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x438) returned 0x68e430 [0117.501] GetProcessHeap () returned 0x670000 [0117.501] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0117.501] RegEnumValueW (in: hKey=0xcc, dwIndex=0x5, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="fwcfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0117.501] _wcsicmp (_String1="fwcfg.dll", _String2="ipxmontr.dll") returned -3 [0117.501] _wcsicmp (_String1="fwcfg.dll", _String2="ipxpromn.dll") returned -3 [0117.501] GetProcessHeap () returned 0x670000 [0117.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8c) returned 0x681480 [0117.501] GetProcessHeap () returned 0x670000 [0117.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x688a60 [0117.501] GetProcessHeap () returned 0x670000 [0117.501] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x14) returned 0x688770 [0117.501] _wcsupr (in: _String="fwcfg.dll" | out: _String="FWCFG.DLL") returned="FWCFG.DLL" [0117.501] GetProcessHeap () returned 0x670000 [0117.501] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x67ac30) returned 1 [0117.501] LoadLibraryExW (lpLibFileName="FWCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e8b0000 [0117.677] GetProcAddress (hModule=0x6e8b0000, lpProcName="InitHelperDll") returned 0x6e8b2290 [0117.677] InitHelperDll () returned 0x0 [0117.677] RegisterHelper () returned 0x0 [0117.677] GetProcessHeap () returned 0x670000 [0117.677] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x480) returned 0x687e48 [0117.677] GetProcessHeap () returned 0x670000 [0117.677] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e430) returned 1 [0117.677] RegEnumValueW (in: hKey=0xcc, dwIndex=0x6, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="hnetmon", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0117.677] _wcsicmp (_String1="hnetmon.dll", _String2="ipxmontr.dll") returned -1 [0117.677] _wcsicmp (_String1="hnetmon.dll", _String2="ipxpromn.dll") returned -1 [0117.677] GetProcessHeap () returned 0x670000 [0117.677] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa0) returned 0x68a6c8 [0117.677] GetProcessHeap () returned 0x670000 [0117.678] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x688aa8 [0117.678] GetProcessHeap () returned 0x670000 [0117.678] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x6886f0 [0117.678] _wcsupr (in: _String="hnetmon.dll" | out: _String="HNETMON.DLL") returned="HNETMON.DLL" [0117.678] GetProcessHeap () returned 0x670000 [0117.678] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x681480) returned 1 [0117.678] LoadLibraryExW (lpLibFileName="HNETMON.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e8a0000 [0118.800] GetProcAddress (hModule=0x6e8a0000, lpProcName="InitHelperDll") returned 0x6e8a24b0 [0118.800] InitHelperDll () returned 0x0 [0118.800] RegisterHelper () returned 0x0 [0118.800] GetProcessHeap () returned 0x670000 [0118.800] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4c8) returned 0x68e838 [0118.801] GetProcessHeap () returned 0x670000 [0118.801] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0118.801] RegEnumValueW (in: hKey=0xcc, dwIndex=0x7, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="netiohlp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0118.801] _wcsicmp (_String1="netiohlp.dll", _String2="ipxmontr.dll") returned 5 [0118.801] _wcsicmp (_String1="netiohlp.dll", _String2="ipxpromn.dll") returned 5 [0118.801] GetProcessHeap () returned 0x670000 [0118.801] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb4) returned 0x6816d0 [0118.801] GetProcessHeap () returned 0x670000 [0118.801] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x6887f0 [0118.801] GetProcessHeap () returned 0x670000 [0118.801] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x680408 [0118.801] _wcsupr (in: _String="netiohlp.dll" | out: _String="NETIOHLP.DLL") returned="NETIOHLP.DLL" [0118.801] GetProcessHeap () returned 0x670000 [0118.801] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68a6c8) returned 1 [0118.801] LoadLibraryExW (lpLibFileName="NETIOHLP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e5b0000 [0120.064] GetProcAddress (hModule=0x6e5b0000, lpProcName="InitHelperDll") returned 0x6e5c69d0 [0120.064] InitHelperDll () returned 0x0 [0120.064] RegisterHelper () returned 0x0 [0120.064] GetProcessHeap () returned 0x670000 [0120.064] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x510) returned 0x687e48 [0120.064] GetProcessHeap () returned 0x670000 [0120.065] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e838) returned 1 [0120.065] RegisterHelper () returned 0x0 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x558) returned 0x68e838 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0120.065] RegisterHelper () returned 0x0 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5a0) returned 0x687e48 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e838) returned 1 [0120.065] RegisterHelper () returned 0x0 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x5e8) returned 0x68e838 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687e48) returned 1 [0120.065] RegisterHelper () returned 0x0 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x630) returned 0x68ee28 [0120.065] GetProcessHeap () returned 0x670000 [0120.065] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e838) returned 1 [0120.065] RegisterHelper () returned 0x0 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x678) returned 0x68f460 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ee28) returned 1 [0120.066] RegisterHelper () returned 0x0 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x6c0) returned 0x68e838 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68f460) returned 1 [0120.066] RegisterHelper () returned 0x0 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x708) returned 0x68ef00 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e838) returned 1 [0120.066] RegisterHelper () returned 0x0 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x750) returned 0x68f610 [0120.066] GetProcessHeap () returned 0x670000 [0120.066] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ef00) returned 1 [0120.066] RegEnumValueW (in: hKey=0xcc, dwIndex=0x8, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="nshhttp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0120.066] _wcsicmp (_String1="nshhttp.dll", _String2="ipxmontr.dll") returned 5 [0120.066] _wcsicmp (_String1="nshhttp.dll", _String2="ipxpromn.dll") returned 5 [0120.066] GetProcessHeap () returned 0x670000 [0120.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc8) returned 0x68e268 [0120.067] GetProcessHeap () returned 0x670000 [0120.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x68e628 [0120.067] GetProcessHeap () returned 0x670000 [0120.067] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x688590 [0120.067] _wcsupr (in: _String="nshhttp.dll" | out: _String="NSHHTTP.DLL") returned="NSHHTTP.DLL" [0120.067] GetProcessHeap () returned 0x670000 [0120.067] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6816d0) returned 1 [0120.067] LoadLibraryExW (lpLibFileName="NSHHTTP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e5a0000 [0120.557] GetProcAddress (hModule=0x6e5a0000, lpProcName="InitHelperDll") returned 0x6e5a1b90 [0120.558] InitHelperDll () returned 0x0 [0120.558] RegisterHelper () returned 0x0 [0120.558] GetProcessHeap () returned 0x670000 [0120.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x798) returned 0x68e838 [0120.558] GetProcessHeap () returned 0x670000 [0120.558] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68f610) returned 1 [0120.558] RegEnumValueW (in: hKey=0xcc, dwIndex=0x9, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="nshipsec", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0120.558] _wcsicmp (_String1="nshipsec.dll", _String2="ipxmontr.dll") returned 5 [0120.558] _wcsicmp (_String1="nshipsec.dll", _String2="ipxpromn.dll") returned 5 [0120.558] GetProcessHeap () returned 0x670000 [0120.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xdc) returned 0x6892e8 [0120.558] GetProcessHeap () returned 0x670000 [0120.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x688710 [0120.558] GetProcessHeap () returned 0x670000 [0120.558] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x680368 [0120.558] _wcsupr (in: _String="nshipsec.dll" | out: _String="NSHIPSEC.DLL") returned="NSHIPSEC.DLL" [0120.559] GetProcessHeap () returned 0x670000 [0120.559] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e268) returned 1 [0120.559] LoadLibraryExW (lpLibFileName="NSHIPSEC.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e520000 [0134.901] GetProcAddress (hModule=0x6e520000, lpProcName="InitHelperDll") returned 0x6e523910 [0134.901] InitHelperDll () returned 0x0 [0134.901] RegisterHelper () returned 0x0 [0134.901] GetProcessHeap () returned 0x670000 [0134.902] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x7e0) returned 0x692bf0 [0134.902] GetProcessHeap () returned 0x670000 [0134.902] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e838) returned 1 [0134.902] RegisterHelper () returned 0x0 [0134.902] GetProcessHeap () returned 0x670000 [0134.902] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x828) returned 0x6933d8 [0134.902] GetProcessHeap () returned 0x670000 [0134.902] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x692bf0) returned 1 [0134.902] RegisterHelper () returned 0x0 [0134.902] GetProcessHeap () returned 0x670000 [0134.902] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x870) returned 0x693c08 [0134.903] GetProcessHeap () returned 0x670000 [0134.903] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6933d8) returned 1 [0135.476] RegEnumValueW (in: hKey=0xcc, dwIndex=0xa, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="nshwfp", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0135.476] _wcsicmp (_String1="nshwfp.dll", _String2="ipxmontr.dll") returned 5 [0135.477] _wcsicmp (_String1="nshwfp.dll", _String2="ipxpromn.dll") returned 5 [0135.477] GetProcessHeap () returned 0x670000 [0135.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xf0) returned 0x68ec40 [0135.477] GetProcessHeap () returned 0x670000 [0135.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x68e9d0 [0135.477] GetProcessHeap () returned 0x670000 [0135.477] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16) returned 0x6887b0 [0135.477] _wcsupr (in: _String="nshwfp.dll" | out: _String="NSHWFP.DLL") returned="NSHWFP.DLL" [0135.477] GetProcessHeap () returned 0x670000 [0135.477] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6892e8) returned 1 [0135.780] LoadLibraryExW (lpLibFileName="NSHWFP.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e1e0000 [0140.544] GetProcAddress (hModule=0x6e1e0000, lpProcName="InitHelperDll") returned 0x6e233bb0 [0140.544] InitHelperDll () returned 0x0 [0140.544] RegisterHelper () returned 0x0 [0140.544] GetProcessHeap () returned 0x670000 [0140.544] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8b8) returned 0x695f98 [0140.544] GetProcessHeap () returned 0x670000 [0140.545] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x693c08) returned 1 [0140.545] RegEnumValueW (in: hKey=0xcc, dwIndex=0xb, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="p2pnetsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0140.545] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxmontr.dll") returned 7 [0140.545] _wcsicmp (_String1="p2pnetsh.dll", _String2="ipxpromn.dll") returned 7 [0140.545] GetProcessHeap () returned 0x670000 [0140.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x104) returned 0x68ed38 [0140.545] GetProcessHeap () returned 0x670000 [0140.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x6887d0 [0140.545] GetProcessHeap () returned 0x670000 [0140.545] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x692248 [0140.547] _wcsupr (in: _String="p2pnetsh.dll" | out: _String="P2PNETSH.DLL") returned="P2PNETSH.DLL" [0140.547] GetProcessHeap () returned 0x670000 [0140.547] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ec40) returned 1 [0140.547] LoadLibraryExW (lpLibFileName="P2PNETSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e160000 [0146.803] GetProcAddress (hModule=0x6e160000, lpProcName="InitHelperDll") returned 0x6e1658d0 [0146.803] InitHelperDll () returned 0x0 [0146.803] RegisterHelper () returned 0x0 [0146.803] GetProcessHeap () returned 0x670000 [0146.803] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x900) returned 0x696990 [0146.804] GetProcessHeap () returned 0x670000 [0146.804] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x695f98) returned 1 [0146.804] RegisterHelper () returned 0x0 [0146.804] GetProcessHeap () returned 0x670000 [0146.804] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x948) returned 0x697298 [0146.804] GetProcessHeap () returned 0x670000 [0146.804] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696990) returned 1 [0146.804] RegisterHelper () returned 0x0 [0146.804] GetProcessHeap () returned 0x670000 [0146.804] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x990) returned 0x697be8 [0146.805] GetProcessHeap () returned 0x670000 [0146.805] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697298) returned 1 [0146.805] RegisterHelper () returned 0x0 [0146.805] GetProcessHeap () returned 0x670000 [0146.805] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x9d8) returned 0x698580 [0146.805] GetProcessHeap () returned 0x670000 [0146.805] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697be8) returned 1 [0146.817] RegisterHelper () returned 0x0 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa20) returned 0x696990 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x698580) returned 1 [0146.817] RegisterHelper () returned 0x0 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa68) returned 0x6973b8 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696990) returned 1 [0146.817] RegisterHelper () returned 0x0 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xab0) returned 0x697e28 [0146.817] GetProcessHeap () returned 0x670000 [0146.817] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6973b8) returned 1 [0146.818] RegisterHelper () returned 0x0 [0146.818] GetProcessHeap () returned 0x670000 [0146.818] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xaf8) returned 0x696990 [0146.818] GetProcessHeap () returned 0x670000 [0146.818] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697e28) returned 1 [0146.819] RegEnumValueW (in: hKey=0xcc, dwIndex=0xc, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="rpc", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0146.819] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxmontr.dll") returned 9 [0146.819] _wcsicmp (_String1="rpcnsh.dll", _String2="ipxpromn.dll") returned 9 [0146.819] GetProcessHeap () returned 0x670000 [0146.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x118) returned 0x6892e8 [0146.819] GetProcessHeap () returned 0x670000 [0146.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x689048 [0146.819] GetProcessHeap () returned 0x670000 [0146.819] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16) returned 0x688630 [0146.819] _wcsupr (in: _String="rpcnsh.dll" | out: _String="RPCNSH.DLL") returned="RPCNSH.DLL" [0146.819] GetProcessHeap () returned 0x670000 [0146.819] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ed38) returned 1 [0146.819] LoadLibraryExW (lpLibFileName="RPCNSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e120000 [0147.457] GetProcAddress (hModule=0x6e120000, lpProcName="InitHelperDll") returned 0x6e122a80 [0147.457] InitHelperDll () returned 0x0 [0147.457] RegisterHelper () returned 0x0 [0147.457] GetProcessHeap () returned 0x670000 [0147.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb40) returned 0x697490 [0147.457] GetProcessHeap () returned 0x670000 [0147.457] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696990) returned 1 [0147.457] RegisterHelper () returned 0x0 [0147.457] GetProcessHeap () returned 0x670000 [0147.457] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xb88) returned 0x697fd8 [0147.457] GetProcessHeap () returned 0x670000 [0147.457] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697490) returned 1 [0147.458] RegEnumValueW (in: hKey=0xcc, dwIndex=0xd, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="whhelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0147.458] _wcsicmp (_String1="whhelper.dll", _String2="ipxmontr.dll") returned 14 [0147.458] _wcsicmp (_String1="whhelper.dll", _String2="ipxpromn.dll") returned 14 [0147.458] GetProcessHeap () returned 0x670000 [0147.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12c) returned 0x68ec40 [0147.458] GetProcessHeap () returned 0x670000 [0147.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x6885b0 [0147.458] GetProcessHeap () returned 0x670000 [0147.458] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x6921f8 [0147.458] _wcsupr (in: _String="whhelper.dll" | out: _String="WHHELPER.DLL") returned="WHHELPER.DLL" [0147.458] GetProcessHeap () returned 0x670000 [0147.458] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6892e8) returned 1 [0147.458] LoadLibraryExW (lpLibFileName="WHHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e110000 [0148.199] GetProcAddress (hModule=0x6e110000, lpProcName="InitHelperDll") returned 0x6e1117b0 [0148.199] InitHelperDll () returned 0x0 [0148.199] RegisterHelper () returned 0x0 [0148.199] GetProcessHeap () returned 0x670000 [0148.199] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xbd0) returned 0x696990 [0148.200] GetProcessHeap () returned 0x670000 [0148.200] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697fd8) returned 1 [0148.200] RegEnumValueW (in: hKey=0xcc, dwIndex=0xe, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="wlancfg", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0148.200] _wcsicmp (_String1="wlancfg.dll", _String2="ipxmontr.dll") returned 14 [0148.200] _wcsicmp (_String1="wlancfg.dll", _String2="ipxpromn.dll") returned 14 [0148.200] GetProcessHeap () returned 0x670000 [0148.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x140) returned 0x693bf8 [0148.200] GetProcessHeap () returned 0x670000 [0148.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x10) returned 0x68eb50 [0148.200] GetProcessHeap () returned 0x670000 [0148.200] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x688650 [0148.200] _wcsupr (in: _String="wlancfg.dll" | out: _String="WLANCFG.DLL") returned="WLANCFG.DLL" [0148.200] GetProcessHeap () returned 0x670000 [0148.200] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ec40) returned 1 [0148.200] LoadLibraryExW (lpLibFileName="WLANCFG.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e0d0000 [0160.450] GetProcAddress (hModule=0x6e0d0000, lpProcName="InitHelperDll") returned 0x6e0d9fb0 [0160.451] InitHelperDll () returned 0x0 [0160.451] RegisterHelper () returned 0x0 [0160.451] GetProcessHeap () returned 0x670000 [0160.451] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc18) returned 0x697568 [0160.451] GetProcessHeap () returned 0x670000 [0160.451] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696990) returned 1 [0160.451] RegEnumValueW (in: hKey=0xcc, dwIndex=0xf, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="wshelper", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0160.451] _wcsicmp (_String1="wshelper.dll", _String2="ipxmontr.dll") returned 14 [0160.461] _wcsicmp (_String1="wshelper.dll", _String2="ipxpromn.dll") returned 14 [0160.461] GetProcessHeap () returned 0x670000 [0160.461] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x154) returned 0x68ec40 [0160.462] GetProcessHeap () returned 0x670000 [0160.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x6885f0 [0160.462] GetProcessHeap () returned 0x670000 [0160.462] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1a) returned 0x6921d0 [0160.462] _wcsupr (in: _String="wshelper.dll" | out: _String="WSHELPER.DLL") returned="WSHELPER.DLL" [0160.462] GetProcessHeap () returned 0x670000 [0160.462] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x693bf8) returned 1 [0160.462] LoadLibraryExW (lpLibFileName="WSHELPER.DLL", hFile=0x0, dwFlags=0x0) returned 0x6e040000 [0167.913] GetProcAddress (hModule=0x6e040000, lpProcName="InitHelperDll") returned 0x6e0416c0 [0167.913] InitHelperDll () returned 0x0 [0167.913] RegisterHelper () returned 0x0 [0167.913] GetProcessHeap () returned 0x670000 [0167.913] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc60) returned 0x699198 [0167.914] GetProcessHeap () returned 0x670000 [0167.914] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697568) returned 1 [0167.914] RegEnumValueW (in: hKey=0xcc, dwIndex=0x10, lpValueName=0x676588, lpcchValueName=0x197ad4, lpReserved=0x0, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8 | out: lpValueName="peerdistsh", lpcchValueName=0x197ad4, lpType=0x0, lpData=0x677058, lpcbData=0x197ad8) returned 0x0 [0167.914] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxmontr.dll") returned 7 [0167.914] _wcsicmp (_String1="peerdistsh.dll", _String2="ipxpromn.dll") returned 7 [0167.914] GetProcessHeap () returned 0x670000 [0167.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x168) returned 0x699e00 [0167.914] GetProcessHeap () returned 0x670000 [0167.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16) returned 0x696348 [0167.914] GetProcessHeap () returned 0x670000 [0167.914] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1e) returned 0x692400 [0167.914] _wcsupr (in: _String="peerdistsh.dll" | out: _String="PEERDISTSH.DLL") returned="PEERDISTSH.DLL" [0167.914] GetProcessHeap () returned 0x670000 [0167.914] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ec40) returned 1 [0167.914] LoadLibraryExW (lpLibFileName="PEERDISTSH.DLL", hFile=0x0, dwFlags=0x0) returned 0x6df90000 [0170.547] GetProcAddress (hModule=0x6df90000, lpProcName="InitHelperDll") returned 0x6dfae4d0 [0170.547] InitHelperDll () returned 0x0 [0170.549] RegisterHelper () returned 0x0 [0170.549] GetProcessHeap () returned 0x670000 [0170.549] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xca8) returned 0x69bf78 [0170.550] GetProcessHeap () returned 0x670000 [0170.550] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699198) returned 1 [0170.550] RegisterHelper () returned 0x0 [0170.550] GetProcessHeap () returned 0x670000 [0170.550] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xcf0) returned 0x69cc28 [0170.550] GetProcessHeap () returned 0x670000 [0170.550] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x69bf78) returned 1 [0170.550] RegCloseKey (hKey=0xcc) returned 0x0 [0170.551] GetProcessHeap () returned 0x670000 [0170.551] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676588) returned 1 [0170.551] GetProcessHeap () returned 0x670000 [0170.551] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x677058) returned 1 [0170.553] GetProcessHeap () returned 0x670000 [0170.553] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687758 [0170.553] GetProcessHeap () returned 0x670000 [0170.553] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0170.554] RegisterContext () returned 0x0 [0170.554] GetProcessHeap () returned 0x670000 [0170.554] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0170.554] GetProcessHeap () returned 0x670000 [0170.554] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0170.554] RegisterContext () returned 0x0 [0170.557] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0170.557] _wcsicmp (_String1="ras", _String2="interface") returned 9 [0170.557] GetProcessHeap () returned 0x670000 [0170.557] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x681480 [0170.557] GetProcessHeap () returned 0x670000 [0170.557] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0171.509] RegisterContext () returned 0x0 [0171.510] GetProcessHeap () returned 0x670000 [0171.510] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687a78 [0171.510] GetProcessHeap () returned 0x670000 [0171.510] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0171.510] RegisterContext () returned 0x0 [0171.511] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0171.511] _wcsicmp (_String1="ipv6", _String2="ip") returned 118 [0171.511] GetProcessHeap () returned 0x670000 [0171.511] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x6967a0 [0171.511] GetProcessHeap () returned 0x670000 [0171.511] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687a78) returned 1 [0171.511] RegisterContext () returned 0x0 [0171.513] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0171.513] _wcsicmp (_String1="aaaa", _String2="ipv6") returned -8 [0171.513] _wcsicmp (_String1="aaaa", _String2="ip") returned -8 [0171.513] GetProcessHeap () returned 0x670000 [0171.513] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x694e08 [0171.513] GetProcessHeap () returned 0x670000 [0171.513] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6967a0) returned 1 [0171.514] RegisterContext () returned 0x0 [0171.514] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0171.514] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0171.514] _wcsicmp (_String1="diagnostics", _String2="ipv6") returned -5 [0171.514] _wcsicmp (_String1="diagnostics", _String2="aaaa") returned 3 [0171.515] _wcsicmp (_String1="diagnostics", _String2="ip") returned -5 [0171.515] GetProcessHeap () returned 0x670000 [0171.515] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x68ed98 [0171.515] GetProcessHeap () returned 0x670000 [0171.515] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x694e08) returned 1 [0171.516] RegisterContext () returned 0x0 [0171.516] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0171.516] _wcsicmp (_String1="advfirewall", _String2="ras") returned -17 [0171.516] _wcsicmp (_String1="advfirewall", _String2="interface") returned -8 [0171.516] GetProcessHeap () returned 0x670000 [0171.516] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x694e08 [0171.516] GetProcessHeap () returned 0x670000 [0171.516] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x681480) returned 1 [0171.517] RegisterContext () returned 0x0 [0171.517] GetProcessHeap () returned 0x670000 [0171.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0171.517] GetProcessHeap () returned 0x670000 [0171.517] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0171.517] RegisterContext () returned 0x0 [0171.517] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0171.517] _wcsicmp (_String1="firewall", _String2="consec") returned 3 [0171.517] GetProcessHeap () returned 0x670000 [0171.517] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x681480 [0171.517] GetProcessHeap () returned 0x670000 [0171.517] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0171.517] RegisterContext () returned 0x0 [0171.517] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0171.517] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0171.518] _wcsicmp (_String1="monitor", _String2="consec") returned 10 [0171.518] _wcsicmp (_String1="monitor", _String2="firewall") returned 7 [0171.518] GetProcessHeap () returned 0x670000 [0171.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x68eec0 [0171.518] GetProcessHeap () returned 0x670000 [0171.518] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x681480) returned 1 [0171.518] RegisterContext () returned 0x0 [0171.518] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0171.518] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0171.518] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0171.518] _wcsicmp (_String1="mainmode", _String2="consec") returned 10 [0171.518] _wcsicmp (_String1="mainmode", _String2="firewall") returned 7 [0171.518] _wcsicmp (_String1="mainmode", _String2="monitor") returned -14 [0171.518] GetProcessHeap () returned 0x670000 [0171.518] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x697988 [0171.518] GetProcessHeap () returned 0x670000 [0171.518] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68eec0) returned 1 [0171.519] RegisterContext () returned 0x0 [0171.519] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0171.519] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0171.519] _wcsicmp (_String1="dhcpclient", _String2="ras") returned -14 [0171.519] _wcsicmp (_String1="dhcpclient", _String2="advfirewall") returned 3 [0171.519] _wcsicmp (_String1="dhcpclient", _String2="interface") returned -5 [0171.519] GetProcessHeap () returned 0x670000 [0171.519] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x697ab0 [0171.519] GetProcessHeap () returned 0x670000 [0171.519] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x694e08) returned 1 [0171.519] RegisterContext () returned 0x0 [0171.519] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0171.520] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0171.520] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0171.520] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0171.520] _wcsicmp (_String1="lan", _String2="advfirewall") returned 11 [0171.520] _wcsicmp (_String1="lan", _String2="dhcpclient") returned 8 [0171.520] _wcsicmp (_String1="lan", _String2="interface") returned 3 [0171.520] _wcsicmp (_String1="lan", _String2="ras") returned -6 [0171.520] GetProcessHeap () returned 0x670000 [0171.520] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x168) returned 0x697bd8 [0171.520] GetProcessHeap () returned 0x670000 [0171.520] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697ab0) returned 1 [0172.229] RegisterContext () returned 0x0 [0172.229] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0172.229] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0172.229] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0172.229] _wcsicmp (_String1="firewall", _String2="lan") returned -6 [0172.229] _wcsicmp (_String1="firewall", _String2="ras") returned -12 [0172.229] _wcsicmp (_String1="firewall", _String2="advfirewall") returned 5 [0172.229] _wcsicmp (_String1="firewall", _String2="dhcpclient") returned 2 [0172.229] _wcsicmp (_String1="firewall", _String2="interface") returned -3 [0172.229] GetProcessHeap () returned 0x670000 [0172.229] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1b0) returned 0x697d48 [0172.230] GetProcessHeap () returned 0x670000 [0172.230] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697bd8) returned 1 [0172.230] RegisterContext () returned 0x0 [0172.230] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0172.230] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0172.230] _wcsicmp (_String1="bridge", _String2="firewall") returned -4 [0172.230] _wcsicmp (_String1="bridge", _String2="interface") returned -7 [0172.230] _wcsicmp (_String1="bridge", _String2="lan") returned -10 [0172.230] _wcsicmp (_String1="bridge", _String2="ras") returned -16 [0172.230] _wcsicmp (_String1="bridge", _String2="advfirewall") returned 1 [0172.230] _wcsicmp (_String1="bridge", _String2="dhcpclient") returned -2 [0172.230] GetProcessHeap () returned 0x670000 [0172.230] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1f8) returned 0x697f00 [0172.231] GetProcessHeap () returned 0x670000 [0172.231] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697d48) returned 1 [0172.231] RegisterContext () returned 0x0 [0172.231] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0172.231] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0172.231] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0172.231] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0172.231] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0172.231] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0172.231] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0172.231] _wcsicmp (_String1="netio", _String2="advfirewall") returned 13 [0172.231] _wcsicmp (_String1="netio", _String2="bridge") returned 12 [0172.231] _wcsicmp (_String1="netio", _String2="dhcpclient") returned 10 [0172.231] _wcsicmp (_String1="netio", _String2="firewall") returned 8 [0172.231] _wcsicmp (_String1="netio", _String2="interface") returned 5 [0172.231] _wcsicmp (_String1="netio", _String2="lan") returned 2 [0172.231] _wcsicmp (_String1="netio", _String2="ras") returned -4 [0172.231] GetProcessHeap () returned 0x670000 [0172.231] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x240) returned 0x697ab0 [0172.232] GetProcessHeap () returned 0x670000 [0172.232] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697f00) returned 1 [0172.232] RegisterContext () returned 0x0 [0172.232] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0172.232] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0172.232] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0172.232] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0172.232] _wcsicmp (_String1="dnsclient", _String2="interface") returned -5 [0172.232] _wcsicmp (_String1="dnsclient", _String2="lan") returned -8 [0172.232] _wcsicmp (_String1="dnsclient", _String2="netio") returned -10 [0172.232] _wcsicmp (_String1="dnsclient", _String2="ras") returned -14 [0172.232] _wcsicmp (_String1="dnsclient", _String2="advfirewall") returned 3 [0172.232] _wcsicmp (_String1="dnsclient", _String2="bridge") returned 2 [0172.232] _wcsicmp (_String1="dnsclient", _String2="dhcpclient") returned 6 [0172.232] _wcsicmp (_String1="dnsclient", _String2="firewall") returned -2 [0172.232] GetProcessHeap () returned 0x670000 [0172.232] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x288) returned 0x697cf8 [0172.233] GetProcessHeap () returned 0x670000 [0172.233] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697ab0) returned 1 [0172.233] RegisterContext () returned 0x0 [0172.233] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0172.233] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0172.233] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0172.233] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0172.233] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0172.233] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0172.233] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0172.233] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0172.233] _wcsicmp (_String1="namespace", _String2="ras") returned -4 [0172.233] _wcsicmp (_String1="namespace", _String2="advfirewall") returned 13 [0172.233] _wcsicmp (_String1="namespace", _String2="bridge") returned 12 [0172.234] _wcsicmp (_String1="namespace", _String2="dhcpclient") returned 10 [0172.234] _wcsicmp (_String1="namespace", _String2="dnsclient") returned 10 [0172.234] _wcsicmp (_String1="namespace", _String2="firewall") returned 8 [0172.234] _wcsicmp (_String1="namespace", _String2="interface") returned 5 [0172.234] _wcsicmp (_String1="namespace", _String2="lan") returned 2 [0172.234] _wcsicmp (_String1="namespace", _String2="netio") returned -4 [0172.234] GetProcessHeap () returned 0x670000 [0172.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x2d0) returned 0x699198 [0172.234] GetProcessHeap () returned 0x670000 [0172.234] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697cf8) returned 1 [0172.234] RegisterContext () returned 0x0 [0172.234] GetProcessHeap () returned 0x670000 [0172.234] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0172.234] GetProcessHeap () returned 0x670000 [0172.234] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.234] RegisterContext () returned 0x0 [0172.234] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0172.234] _wcsicmp (_String1="ipv6", _String2="ipv4") returned 2 [0172.234] GetProcessHeap () returned 0x670000 [0172.235] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x681480 [0172.235] GetProcessHeap () returned 0x670000 [0172.235] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0172.235] RegisterContext () returned 0x0 [0172.235] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0172.235] _wcsicmp (_String1="6to4", _String2="ipv6") returned -51 [0172.235] _wcsicmp (_String1="6to4", _String2="ipv4") returned -51 [0172.235] GetProcessHeap () returned 0x670000 [0172.235] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x694e08 [0172.235] GetProcessHeap () returned 0x670000 [0172.235] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x681480) returned 1 [0172.235] RegisterContext () returned 0x0 [0172.235] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0172.236] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0172.236] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0172.236] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0172.236] _wcsicmp (_String1="isatap", _String2="ipv4") returned 3 [0172.236] _wcsicmp (_String1="isatap", _String2="ipv6") returned 3 [0172.236] GetProcessHeap () returned 0x670000 [0172.236] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x120) returned 0x697ab0 [0172.236] GetProcessHeap () returned 0x670000 [0172.236] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x694e08) returned 1 [0172.236] RegisterContext () returned 0x0 [0172.236] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0172.236] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0172.236] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0172.236] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0172.236] _wcsicmp (_String1="teredo", _String2="6to4") returned 62 [0172.236] _wcsicmp (_String1="teredo", _String2="ipv4") returned 11 [0172.236] _wcsicmp (_String1="teredo", _String2="ipv6") returned 11 [0172.238] _wcsicmp (_String1="teredo", _String2="isatap") returned 11 [0172.238] GetProcessHeap () returned 0x670000 [0172.238] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x168) returned 0x697bd8 [0172.238] GetProcessHeap () returned 0x670000 [0172.238] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697ab0) returned 1 [0172.238] RegisterContext () returned 0x0 [0172.238] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0172.238] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0172.238] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0172.239] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0172.239] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0172.239] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0172.239] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0172.239] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0172.239] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0172.239] _wcsicmp (_String1="portproxy", _String2="teredo") returned -4 [0172.239] GetProcessHeap () returned 0x670000 [0172.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1b0) returned 0x697d48 [0172.239] GetProcessHeap () returned 0x670000 [0172.239] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697bd8) returned 1 [0172.239] RegisterContext () returned 0x0 [0172.239] GetProcessHeap () returned 0x670000 [0172.239] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0172.239] GetProcessHeap () returned 0x670000 [0172.239] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.239] RegisterContext () returned 0x0 [0172.239] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0172.239] _wcsicmp (_String1="isatap", _String2="6to4") returned 51 [0172.240] GetProcessHeap () returned 0x670000 [0172.240] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x681480 [0172.240] GetProcessHeap () returned 0x670000 [0172.240] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0172.240] RegisterContext () returned 0x0 [0172.240] _wcsicmp (_String1="portproxy", _String2="6to4") returned 58 [0172.240] _wcsicmp (_String1="portproxy", _String2="ipv4") returned 7 [0172.240] _wcsicmp (_String1="portproxy", _String2="ipv6") returned 7 [0172.240] _wcsicmp (_String1="portproxy", _String2="isatap") returned 7 [0172.240] _wcsicmp (_String1="portproxy", _String2="portproxy") returned 0 [0172.240] RegisterContext () returned 0x0 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="ipv6") returned -1 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="isatap") returned -1 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="portproxy") returned -8 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="teredo") returned -12 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="6to4") returned 50 [0172.240] _wcsicmp (_String1="httpstunnel", _String2="ipv4") returned -1 [0172.240] GetProcessHeap () returned 0x670000 [0172.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x1f8) returned 0x697f00 [0172.241] GetProcessHeap () returned 0x670000 [0172.241] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697d48) returned 1 [0172.241] RegisterContext () returned 0x0 [0172.241] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0172.241] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0172.241] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0172.241] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0172.241] _wcsicmp (_String1="tcp", _String2="6to4") returned 62 [0172.241] _wcsicmp (_String1="tcp", _String2="httpstunnel") returned 12 [0172.241] _wcsicmp (_String1="tcp", _String2="ipv4") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="ipv6") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="isatap") returned 11 [0172.241] _wcsicmp (_String1="tcp", _String2="portproxy") returned 4 [0172.241] _wcsicmp (_String1="tcp", _String2="teredo") returned -2 [0172.241] GetProcessHeap () returned 0x670000 [0172.241] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x240) returned 0x697ab0 [0172.241] GetProcessHeap () returned 0x670000 [0172.241] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697f00) returned 1 [0172.242] RegisterContext () returned 0x0 [0172.242] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0172.242] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0172.242] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0172.242] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0172.242] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0172.242] _wcsicmp (_String1="http", _String2="interface") returned -1 [0172.242] _wcsicmp (_String1="http", _String2="lan") returned -4 [0172.242] _wcsicmp (_String1="http", _String2="namespace") returned -6 [0172.242] _wcsicmp (_String1="http", _String2="netio") returned -6 [0172.242] _wcsicmp (_String1="http", _String2="ras") returned -10 [0172.242] _wcsicmp (_String1="http", _String2="advfirewall") returned 7 [0172.242] _wcsicmp (_String1="http", _String2="bridge") returned 6 [0172.242] _wcsicmp (_String1="http", _String2="dhcpclient") returned 4 [0172.242] _wcsicmp (_String1="http", _String2="dnsclient") returned 4 [0172.242] _wcsicmp (_String1="http", _String2="firewall") returned 2 [0172.242] _wcsicmp (_String1="http", _String2="interface") returned -1 [0172.242] GetProcessHeap () returned 0x670000 [0172.242] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x318) returned 0x697cf8 [0172.242] GetProcessHeap () returned 0x670000 [0172.242] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699198) returned 1 [0172.243] RegisterContext () returned 0x0 [0172.243] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0172.243] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0172.243] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0172.244] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0172.244] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0172.244] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0172.244] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0172.244] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0172.244] _wcsicmp (_String1="ipsec", _String2="namespace") returned -5 [0172.244] _wcsicmp (_String1="ipsec", _String2="netio") returned -5 [0172.244] _wcsicmp (_String1="ipsec", _String2="ras") returned -9 [0172.244] _wcsicmp (_String1="ipsec", _String2="advfirewall") returned 8 [0172.244] _wcsicmp (_String1="ipsec", _String2="bridge") returned 7 [0172.244] _wcsicmp (_String1="ipsec", _String2="dhcpclient") returned 5 [0172.244] _wcsicmp (_String1="ipsec", _String2="dnsclient") returned 5 [0172.244] _wcsicmp (_String1="ipsec", _String2="firewall") returned 3 [0172.244] _wcsicmp (_String1="ipsec", _String2="http") returned 1 [0172.244] _wcsicmp (_String1="ipsec", _String2="interface") returned 2 [0172.244] _wcsicmp (_String1="ipsec", _String2="lan") returned -3 [0172.244] GetProcessHeap () returned 0x670000 [0172.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x360) returned 0x699198 [0172.244] GetProcessHeap () returned 0x670000 [0172.244] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697cf8) returned 1 [0172.244] RegisterContext () returned 0x0 [0172.244] GetProcessHeap () returned 0x670000 [0172.244] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0172.245] GetProcessHeap () returned 0x670000 [0172.245] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.245] RegisterContext () returned 0x0 [0172.245] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0172.245] _wcsicmp (_String1="dynamic", _String2="static") returned -15 [0172.245] GetProcessHeap () returned 0x670000 [0172.245] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x6967a0 [0172.245] GetProcessHeap () returned 0x670000 [0172.245] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0172.245] RegisterContext () returned 0x0 [0172.245] _wcsicmp (_String1="static", _String2="dynamic") returned 15 [0172.245] _wcsicmp (_String1="static", _String2="static") returned 0 [0172.245] RegisterContext () returned 0x0 [0172.245] _wcsicmp (_String1="dynamic", _String2="dynamic") returned 0 [0172.246] RegisterContext () returned 0x0 [0172.246] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0172.246] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0172.246] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0172.246] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0172.246] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0172.246] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0172.246] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0172.246] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0172.246] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0172.246] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0172.246] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0172.246] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0172.246] _wcsicmp (_String1="wfp", _String2="advfirewall") returned 22 [0172.246] _wcsicmp (_String1="wfp", _String2="bridge") returned 21 [0172.246] _wcsicmp (_String1="wfp", _String2="dhcpclient") returned 19 [0172.246] _wcsicmp (_String1="wfp", _String2="dnsclient") returned 19 [0172.246] _wcsicmp (_String1="wfp", _String2="firewall") returned 17 [0172.246] _wcsicmp (_String1="wfp", _String2="http") returned 15 [0172.246] _wcsicmp (_String1="wfp", _String2="interface") returned 14 [0172.246] _wcsicmp (_String1="wfp", _String2="ipsec") returned 14 [0172.246] _wcsicmp (_String1="wfp", _String2="lan") returned 11 [0172.246] _wcsicmp (_String1="wfp", _String2="namespace") returned 9 [0172.246] _wcsicmp (_String1="wfp", _String2="netio") returned 9 [0172.247] _wcsicmp (_String1="wfp", _String2="ras") returned 5 [0172.247] GetProcessHeap () returned 0x670000 [0172.247] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3a8) returned 0x699500 [0172.247] GetProcessHeap () returned 0x670000 [0172.247] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699198) returned 1 [0172.310] RegisterContext () returned 0x0 [0172.310] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0172.310] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0172.310] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0172.310] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0172.310] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0172.310] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0172.310] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0172.310] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0172.310] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0172.310] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0172.310] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0172.310] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0172.310] _wcsicmp (_String1="p2p", _String2="wfp") returned -7 [0172.310] _wcsicmp (_String1="p2p", _String2="advfirewall") returned 15 [0172.310] _wcsicmp (_String1="p2p", _String2="bridge") returned 14 [0172.310] _wcsicmp (_String1="p2p", _String2="dhcpclient") returned 12 [0172.310] _wcsicmp (_String1="p2p", _String2="dnsclient") returned 12 [0172.310] _wcsicmp (_String1="p2p", _String2="firewall") returned 10 [0172.310] _wcsicmp (_String1="p2p", _String2="http") returned 8 [0172.310] _wcsicmp (_String1="p2p", _String2="interface") returned 7 [0172.310] _wcsicmp (_String1="p2p", _String2="ipsec") returned 7 [0172.310] _wcsicmp (_String1="p2p", _String2="lan") returned 4 [0172.310] _wcsicmp (_String1="p2p", _String2="namespace") returned 2 [0172.311] _wcsicmp (_String1="p2p", _String2="netio") returned 2 [0172.311] _wcsicmp (_String1="p2p", _String2="ras") returned -2 [0172.311] GetProcessHeap () returned 0x670000 [0172.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3f0) returned 0x6998b0 [0172.311] GetProcessHeap () returned 0x670000 [0172.311] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699500) returned 1 [0172.311] RegisterContext () returned 0x0 [0172.311] GetProcessHeap () returned 0x670000 [0172.311] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x6879d8 [0172.311] GetProcessHeap () returned 0x670000 [0172.311] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.953] RegisterContext () returned 0x0 [0172.953] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0172.953] _wcsicmp (_String1="group", _String2="pnrp") returned -9 [0172.954] GetProcessHeap () returned 0x670000 [0172.954] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x694e08 [0172.954] GetProcessHeap () returned 0x670000 [0172.954] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6879d8) returned 1 [0172.991] RegisterContext () returned 0x0 [0172.991] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0172.991] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0172.991] _wcsicmp (_String1="idmgr", _String2="group") returned 2 [0172.991] _wcsicmp (_String1="idmgr", _String2="pnrp") returned -7 [0172.991] GetProcessHeap () returned 0x670000 [0172.991] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x698080 [0172.991] GetProcessHeap () returned 0x670000 [0172.991] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x694e08) returned 1 [0172.991] RegisterContext () returned 0x0 [0172.991] GetProcessHeap () returned 0x670000 [0172.991] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0172.991] GetProcessHeap () returned 0x670000 [0172.991] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.991] RegisterContext () returned 0x0 [0172.991] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0172.992] _wcsicmp (_String1="diagnostics", _String2="cloud") returned 1 [0172.992] GetProcessHeap () returned 0x670000 [0172.992] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x90) returned 0x694e08 [0172.992] GetProcessHeap () returned 0x670000 [0172.992] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x687988) returned 1 [0172.992] RegisterContext () returned 0x0 [0172.992] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0172.992] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0172.992] _wcsicmp (_String1="peer", _String2="cloud") returned 13 [0172.992] _wcsicmp (_String1="peer", _String2="diagnostics") returned 12 [0172.992] GetProcessHeap () returned 0x670000 [0172.992] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xd8) returned 0x68eec0 [0172.992] GetProcessHeap () returned 0x670000 [0172.992] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x694e08) returned 1 [0172.992] RegisterContext () returned 0x0 [0172.992] GetProcessHeap () returned 0x670000 [0172.992] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687988 [0172.992] GetProcessHeap () returned 0x670000 [0172.993] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.994] RegisterContext () returned 0x0 [0172.994] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0172.994] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0172.994] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0172.994] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0172.994] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0172.994] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0172.994] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0172.994] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0172.994] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0172.994] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0172.994] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0172.994] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0172.994] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0172.994] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0172.994] _wcsicmp (_String1="rpc", _String2="advfirewall") returned 17 [0172.994] _wcsicmp (_String1="rpc", _String2="bridge") returned 16 [0172.994] _wcsicmp (_String1="rpc", _String2="dhcpclient") returned 14 [0172.995] _wcsicmp (_String1="rpc", _String2="dnsclient") returned 14 [0172.995] _wcsicmp (_String1="rpc", _String2="firewall") returned 12 [0172.995] _wcsicmp (_String1="rpc", _String2="http") returned 10 [0172.995] _wcsicmp (_String1="rpc", _String2="interface") returned 9 [0172.995] _wcsicmp (_String1="rpc", _String2="ipsec") returned 9 [0172.995] _wcsicmp (_String1="rpc", _String2="lan") returned 6 [0172.995] _wcsicmp (_String1="rpc", _String2="namespace") returned 4 [0172.995] _wcsicmp (_String1="rpc", _String2="netio") returned 4 [0172.995] _wcsicmp (_String1="rpc", _String2="p2p") returned 2 [0172.995] _wcsicmp (_String1="rpc", _String2="ras") returned 15 [0172.995] _wcsicmp (_String1="rpc", _String2="wfp") returned -5 [0172.995] GetProcessHeap () returned 0x670000 [0172.995] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x438) returned 0x699370 [0172.995] GetProcessHeap () returned 0x670000 [0172.995] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6998b0) returned 1 [0172.995] RegisterContext () returned 0x0 [0172.995] GetProcessHeap () returned 0x670000 [0172.995] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x6879d8 [0172.995] GetProcessHeap () returned 0x670000 [0172.995] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0172.996] RegisterContext () returned 0x0 [0172.996] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0172.996] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0172.996] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0172.996] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0172.996] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0172.996] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0172.996] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0172.996] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0172.996] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0172.996] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0172.996] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0172.996] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0172.996] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0172.996] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0172.996] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0172.996] _wcsicmp (_String1="winhttp", _String2="advfirewall") returned 22 [0172.996] _wcsicmp (_String1="winhttp", _String2="bridge") returned 21 [0172.996] _wcsicmp (_String1="winhttp", _String2="dhcpclient") returned 19 [0172.996] _wcsicmp (_String1="winhttp", _String2="dnsclient") returned 19 [0172.996] _wcsicmp (_String1="winhttp", _String2="firewall") returned 17 [0172.996] _wcsicmp (_String1="winhttp", _String2="http") returned 15 [0172.996] _wcsicmp (_String1="winhttp", _String2="interface") returned 14 [0172.996] _wcsicmp (_String1="winhttp", _String2="ipsec") returned 14 [0172.996] _wcsicmp (_String1="winhttp", _String2="lan") returned 11 [0172.996] _wcsicmp (_String1="winhttp", _String2="namespace") returned 9 [0172.996] _wcsicmp (_String1="winhttp", _String2="netio") returned 9 [0172.996] _wcsicmp (_String1="winhttp", _String2="p2p") returned 7 [0172.996] _wcsicmp (_String1="winhttp", _String2="ras") returned 5 [0172.996] _wcsicmp (_String1="winhttp", _String2="rpc") returned 5 [0172.996] _wcsicmp (_String1="winhttp", _String2="wfp") returned 3 [0172.996] GetProcessHeap () returned 0x670000 [0172.996] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x480) returned 0x6997b0 [0172.997] GetProcessHeap () returned 0x670000 [0172.997] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699370) returned 1 [0176.389] RegisterContext () returned 0x0 [0176.389] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0176.389] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0176.389] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0176.390] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0176.390] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0176.390] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0176.390] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0176.390] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0176.390] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0176.390] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0176.390] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0176.390] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0176.390] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0176.390] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0176.390] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0176.390] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0176.390] _wcsicmp (_String1="wlan", _String2="advfirewall") returned 22 [0176.390] _wcsicmp (_String1="wlan", _String2="bridge") returned 21 [0176.390] _wcsicmp (_String1="wlan", _String2="dhcpclient") returned 19 [0176.390] _wcsicmp (_String1="wlan", _String2="dnsclient") returned 19 [0176.390] _wcsicmp (_String1="wlan", _String2="firewall") returned 17 [0176.390] _wcsicmp (_String1="wlan", _String2="http") returned 15 [0176.390] _wcsicmp (_String1="wlan", _String2="interface") returned 14 [0176.390] _wcsicmp (_String1="wlan", _String2="ipsec") returned 14 [0176.390] _wcsicmp (_String1="wlan", _String2="lan") returned 11 [0176.390] _wcsicmp (_String1="wlan", _String2="namespace") returned 9 [0176.390] _wcsicmp (_String1="wlan", _String2="netio") returned 9 [0176.390] _wcsicmp (_String1="wlan", _String2="p2p") returned 7 [0176.390] _wcsicmp (_String1="wlan", _String2="ras") returned 5 [0176.390] _wcsicmp (_String1="wlan", _String2="rpc") returned 5 [0176.390] _wcsicmp (_String1="wlan", _String2="wfp") returned 6 [0176.390] _wcsicmp (_String1="wlan", _String2="winhttp") returned 3 [0176.390] GetProcessHeap () returned 0x670000 [0176.390] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4c8) returned 0x69bf78 [0176.390] GetProcessHeap () returned 0x670000 [0176.390] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6997b0) returned 1 [0176.391] RegisterContext () returned 0x0 [0176.391] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0176.391] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0176.391] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0176.391] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0176.391] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0176.391] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0176.391] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0176.391] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0176.391] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0176.391] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0176.391] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0176.391] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0176.391] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0176.391] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0176.391] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0176.391] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0176.391] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0176.391] _wcsicmp (_String1="winsock", _String2="advfirewall") returned 22 [0176.391] _wcsicmp (_String1="winsock", _String2="bridge") returned 21 [0176.391] _wcsicmp (_String1="winsock", _String2="dhcpclient") returned 19 [0176.391] _wcsicmp (_String1="winsock", _String2="dnsclient") returned 19 [0176.391] _wcsicmp (_String1="winsock", _String2="firewall") returned 17 [0176.391] _wcsicmp (_String1="winsock", _String2="http") returned 15 [0176.392] _wcsicmp (_String1="winsock", _String2="interface") returned 14 [0176.392] _wcsicmp (_String1="winsock", _String2="ipsec") returned 14 [0176.392] _wcsicmp (_String1="winsock", _String2="lan") returned 11 [0176.392] _wcsicmp (_String1="winsock", _String2="namespace") returned 9 [0176.392] _wcsicmp (_String1="winsock", _String2="netio") returned 9 [0176.392] _wcsicmp (_String1="winsock", _String2="p2p") returned 7 [0176.392] _wcsicmp (_String1="winsock", _String2="ras") returned 5 [0176.392] _wcsicmp (_String1="winsock", _String2="rpc") returned 5 [0176.392] _wcsicmp (_String1="winsock", _String2="wfp") returned 3 [0176.392] _wcsicmp (_String1="winsock", _String2="winhttp") returned 11 [0176.392] _wcsicmp (_String1="winsock", _String2="wlan") returned -3 [0176.392] GetProcessHeap () returned 0x670000 [0176.392] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x510) returned 0x6995f8 [0176.392] GetProcessHeap () returned 0x670000 [0176.392] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x69bf78) returned 1 [0177.679] RegisterContext () returned 0x0 [0177.679] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0177.679] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0177.679] _wcsicmp (_String1="branchcache", _String2="dhcpclient") returned -2 [0177.679] _wcsicmp (_String1="branchcache", _String2="dnsclient") returned -2 [0177.679] _wcsicmp (_String1="branchcache", _String2="firewall") returned -4 [0177.679] _wcsicmp (_String1="branchcache", _String2="http") returned -6 [0177.679] _wcsicmp (_String1="branchcache", _String2="interface") returned -7 [0177.679] _wcsicmp (_String1="branchcache", _String2="ipsec") returned -7 [0177.679] _wcsicmp (_String1="branchcache", _String2="lan") returned -10 [0177.679] _wcsicmp (_String1="branchcache", _String2="namespace") returned -12 [0177.679] _wcsicmp (_String1="branchcache", _String2="netio") returned -12 [0177.679] _wcsicmp (_String1="branchcache", _String2="p2p") returned -14 [0177.679] _wcsicmp (_String1="branchcache", _String2="ras") returned -16 [0177.679] _wcsicmp (_String1="branchcache", _String2="rpc") returned -16 [0177.679] _wcsicmp (_String1="branchcache", _String2="wfp") returned -21 [0177.679] _wcsicmp (_String1="branchcache", _String2="winhttp") returned -21 [0177.679] _wcsicmp (_String1="branchcache", _String2="winsock") returned -21 [0177.679] _wcsicmp (_String1="branchcache", _String2="wlan") returned -21 [0177.679] _wcsicmp (_String1="branchcache", _String2="advfirewall") returned 1 [0177.679] _wcsicmp (_String1="branchcache", _String2="bridge") returned -8 [0177.679] GetProcessHeap () returned 0x670000 [0177.679] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x558) returned 0x69c688 [0177.680] GetProcessHeap () returned 0x670000 [0177.680] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6995f8) returned 1 [0177.680] RegisterContext () returned 0x0 [0177.680] GetProcessHeap () returned 0x670000 [0177.680] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x48) returned 0x687a78 [0177.680] GetProcessHeap () returned 0x670000 [0177.680] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x0) returned 1 [0177.680] SetConsoleCtrlHandler (HandlerRoutine=0x17382a0, Add=1) returned 1 [0177.680] SetThreadUILanguage (LangId=0x0) returned 0x409 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-?") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-h") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="?") returned 34 [0178.143] _wcsicmp (_String1="advfirewall", _String2="/?") returned 50 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-v") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-a") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-c") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-f") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-r") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-u") returned 52 [0178.143] _wcsicmp (_String1="advfirewall", _String2="-p") returned 52 [0178.143] GetVersionExW (in: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x1979c4*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0178.143] _vsnwprintf (in: _Buffer=0x1743780, _BufferCount=0x103, _Format="%d.%d.%d", _ArgList=0x1979b0 | out: _Buffer="10.0.10586") returned 10 [0178.143] _vsnwprintf (in: _Buffer=0x1743990, _BufferCount=0x103, _Format="%d", _ArgList=0x1979a0 | out: _Buffer="10586") returned 5 [0178.143] _vsnwprintf (in: _Buffer=0x1743ba0, _BufferCount=0x103, _Format="%d", _ArgList=0x197990 | out: _Buffer="0") returned 1 [0178.143] _vsnwprintf (in: _Buffer=0x1743db0, _BufferCount=0x103, _Format="%d", _ArgList=0x197980 | out: _Buffer="0") returned 1 [0178.184] GetProcessHeap () returned 0x670000 [0178.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697480 [0178.184] GetProcessHeap () returned 0x670000 [0178.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697240 [0178.184] GetProcessHeap () returned 0x670000 [0178.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697498 [0178.184] GetProcessHeap () returned 0x670000 [0178.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x68e880 [0178.184] GetProcessHeap () returned 0x670000 [0178.184] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x68ea30 [0178.184] wcscpy_s (in: _Destination=0x68ea30, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0178.226] GetProcessHeap () returned 0x670000 [0178.226] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697498) returned 1 [0178.226] GetProcessHeap () returned 0x670000 [0178.226] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697240) returned 1 [0178.226] GetProcessHeap () returned 0x670000 [0178.267] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697498 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697240 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8e) returned 0x69c478 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996a0 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x696388 [0178.268] wcscpy_s (in: _Destination=0x696388, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996e8 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x696128 [0178.268] wcscpy_s (in: _Destination=0x696128, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699730 [0178.268] GetProcessHeap () returned 0x670000 [0178.268] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688eb8 [0178.269] wcscpy_s (in: _Destination=0x688eb8, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699760 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa) returned 0x699700 [0178.269] wcscpy_s (in: _Destination=0x699700, _SizeInWords=0x5, _Source="rule" | out: _Destination="rule") returned 0x0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998e0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x34) returned 0x691b10 [0178.269] wcscpy_s (in: _Destination=0x691b10, _SizeInWords=0x1a, _Source="\"group=Network Discovery\"" | out: _Destination="\"group=Network Discovery\"") returned 0x0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699910 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688f98 [0178.269] wcscpy_s (in: _Destination=0x688f98, _SizeInWords=0x4, _Source="new" | out: _Destination="new") returned 0x0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699640 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x699658 [0178.269] wcscpy_s (in: _Destination=0x699658, _SizeInWords=0x7, _Source="enable" | out: _Destination="enable") returned 0x0 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699868 [0178.269] GetProcessHeap () returned 0x670000 [0178.269] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x688e88 [0178.269] wcscpy_s (in: _Destination=0x688e88, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0178.270] GetProcessHeap () returned 0x670000 [0178.270] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996d0 [0178.270] GetProcessHeap () returned 0x670000 [0178.270] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x689028 [0178.316] wcscpy_s (in: _Destination=0x689028, _SizeInWords=0x4, _Source="Yes" | out: _Destination="Yes") returned 0x0 [0178.356] GetProcessHeap () returned 0x670000 [0178.356] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x69c478) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697240) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998f8 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x6960e8 [0178.357] wcscpy_s (in: _Destination=0x6960e8, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696388) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996a0) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699628 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x696008 [0178.357] wcscpy_s (in: _Destination=0x696008, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6960e8) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6998f8) returned 1 [0178.357] GetProcessHeap () returned 0x670000 [0178.357] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699778 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x696168 [0178.397] wcscpy_s (in: _Destination=0x696168, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696128) returned 1 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996e8) returned 1 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699880 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688f68 [0178.397] wcscpy_s (in: _Destination=0x688f68, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688eb8) returned 1 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699730) returned 1 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699838 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa) returned 0x699670 [0178.397] wcscpy_s (in: _Destination=0x699670, _SizeInWords=0x5, _Source="rule" | out: _Destination="rule") returned 0x0 [0178.397] GetProcessHeap () returned 0x670000 [0178.397] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699700) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699760) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996a0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x34) returned 0x691e50 [0178.398] wcscpy_s (in: _Destination=0x691e50, _SizeInWords=0x1a, _Source="\"group=Network Discovery\"" | out: _Destination="\"group=Network Discovery\"") returned 0x0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x691b10) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6998e0) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699700 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x689038 [0178.398] wcscpy_s (in: _Destination=0x689038, _SizeInWords=0x4, _Source="new" | out: _Destination="new") returned 0x0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688f98) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699910) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6997a8 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x699688 [0178.398] wcscpy_s (in: _Destination=0x699688, _SizeInWords=0x7, _Source="enable" | out: _Destination="enable") returned 0x0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699658) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699640) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6997c0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x688e98 [0178.398] wcscpy_s (in: _Destination=0x688e98, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0178.398] GetProcessHeap () returned 0x670000 [0178.398] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688e88) returned 1 [0178.398] GetProcessHeap () returned 0x670000 [0178.399] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699868) returned 1 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996b8 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688f98 [0178.399] wcscpy_s (in: _Destination=0x688f98, _SizeInWords=0x4, _Source="Yes" | out: _Destination="Yes") returned 0x0 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x689028) returned 1 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996d0) returned 1 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x28) returned 0x696bd0 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699910 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x696148 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x6962c8 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688fb8 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa) returned 0x6996e8 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x32) returned 0x691b10 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x689028 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x699658 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x699658, Size=0x10) returned 0x699640 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x699640, Size=0x16) returned 0x696328 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699790 [0178.399] GetProcessHeap () returned 0x670000 [0178.399] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x699790, Size=0xe) returned 0x699850 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x699850, Size=0x24) returned 0x6969f0 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x6969f0, Size=0x26) returned 0x696ab0 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x696ab0, Size=0x36) returned 0x691e90 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x691e90, Size=0x38) returned 0x691f50 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x691f50, Size=0x3e) returned 0x693a78 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x693a78, Size=0x40) returned 0x693640 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x693640, Size=0x48) returned 0x687ac8 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x687ac8, Size=0x4a) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x4c) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x7a) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x7c) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x7e) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x84) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x86) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlReAllocateHeap (Heap=0x670000, Flags=0x0, Ptr=0x69c478, Size=0x9a) returned 0x69c478 [0178.400] GetProcessHeap () returned 0x670000 [0178.400] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x69c478) returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="namespace") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="branchcache") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="advfirewall") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="firewall") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="interface") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="dhcp") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="dnsclient") returned 1 [0178.401] lstrcmpiW (lpString1="netsh", lpString2="routing") returned -1 [0178.402] lstrcmpiW (lpString1="netsh", lpString2="ip") returned 1 [0178.402] lstrcmpiW (lpString1="netsh", lpString2="ipv6") returned 1 [0178.402] lstrcmpiW (lpString1="netsh", lpString2="aaaa") returned 1 [0178.402] lstrcmpiW (lpString1="netsh", lpString2="ras") returned -1 [0178.402] _wcsnicmp (_String1="advfirewall", _String2="dump", _MaxCount=0xb) returned -3 [0178.402] _wcsnicmp (_String1="advfirewall", _String2="help", _MaxCount=0xb) returned -7 [0178.402] _wcsnicmp (_String1="advfirewall", _String2="?", _MaxCount=0xb) returned 34 [0178.402] _wcsnicmp (_String1="advfirewall", _String2="exec", _MaxCount=0xb) returned -4 [0178.402] _wcsnicmp (_String1="advfirewall", _String2="advfirewall", _MaxCount=0xb) returned 0 [0178.402] lstrcmpiW (lpString1="advfirewall", lpString2="namespace") returned -1 [0178.402] lstrcmpiW (lpString1="advfirewall", lpString2="branchcache") returned -1 [0178.402] lstrcmpiW (lpString1="advfirewall", lpString2="advfirewall") returned 0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998e0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699898 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x9a) returned 0x6a2258 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6996d0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699640 [0178.402] wcscpy_s (in: _Destination=0x699640, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699718 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x6960e8 [0178.402] wcscpy_s (in: _Destination=0x6960e8, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699730 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x696308 [0178.402] wcscpy_s (in: _Destination=0x696308, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699820 [0178.402] GetProcessHeap () returned 0x670000 [0178.402] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688e88 [0178.403] wcscpy_s (in: _Destination=0x688e88, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699850 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa) returned 0x699748 [0178.403] wcscpy_s (in: _Destination=0x699748, _SizeInWords=0x5, _Source="rule" | out: _Destination="rule") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699760 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x34) returned 0x691b50 [0178.403] wcscpy_s (in: _Destination=0x691b50, _SizeInWords=0x1a, _Source="\"group=Network Discovery\"" | out: _Destination="\"group=Network Discovery\"") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699790 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688ea8 [0178.403] wcscpy_s (in: _Destination=0x688ea8, _SizeInWords=0x4, _Source="new" | out: _Destination="new") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6997d8 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x699808 [0178.403] wcscpy_s (in: _Destination=0x699808, _SizeInWords=0x7, _Source="enable" | out: _Destination="enable") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6997f0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x688eb8 [0178.403] wcscpy_s (in: _Destination=0x688eb8, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0178.403] GetProcessHeap () returned 0x670000 [0178.403] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699868 [0178.405] GetProcessHeap () returned 0x670000 [0178.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688ee8 [0178.405] wcscpy_s (in: _Destination=0x688ee8, _SizeInWords=0x4, _Source="Yes" | out: _Destination="Yes") returned 0x0 [0178.405] GetProcessHeap () returned 0x670000 [0178.405] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6a2258) returned 1 [0178.405] GetProcessHeap () returned 0x670000 [0178.405] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699898) returned 1 [0178.405] GetProcessHeap () returned 0x670000 [0178.405] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6960e8) returned 1 [0178.405] GetProcessHeap () returned 0x670000 [0178.405] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x696028 [0178.405] lstrcmpiW (lpString1="advfirewall", lpString2="routing") returned -1 [0178.405] lstrcmpiW (lpString1="advfirewall", lpString2="ip") returned -1 [0178.405] lstrcmpiW (lpString1="advfirewall", lpString2="ipv6") returned -1 [0178.406] lstrcmpiW (lpString1="advfirewall", lpString2="aaaa") returned 1 [0178.406] lstrcmpiW (lpString1="advfirewall", lpString2="ras") returned -1 [0178.406] _wcsnicmp (_String1="firewall", _String2="dump", _MaxCount=0x8) returned 2 [0178.406] _wcsnicmp (_String1="firewall", _String2="help", _MaxCount=0x8) returned -2 [0178.406] _wcsnicmp (_String1="firewall", _String2="?", _MaxCount=0x8) returned 39 [0178.406] _wcsnicmp (_String1="firewall", _String2="reset", _MaxCount=0x8) returned -12 [0178.406] _wcsnicmp (_String1="firewall", _String2="import", _MaxCount=0x8) returned -3 [0178.406] _wcsnicmp (_String1="firewall", _String2="export", _MaxCount=0x8) returned 1 [0178.406] _wcsnicmp (_String1="firewall", _String2="consec", _MaxCount=0x8) returned 3 [0178.406] _wcsnicmp (_String1="firewall", _String2="firewall", _MaxCount=0x8) returned 0 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699658 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699898 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x9e) returned 0x6a1a78 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998b0 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998f8 [0178.406] wcscpy_s (in: _Destination=0x6998f8, _SizeInWords=0x6, _Source="netsh" | out: _Destination="netsh") returned 0x0 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6998c8 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x6961c8 [0178.406] wcscpy_s (in: _Destination=0x6961c8, _SizeInWords=0xc, _Source="advfirewall" | out: _Destination="advfirewall") returned 0x0 [0178.406] GetProcessHeap () returned 0x670000 [0178.406] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699928 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x696048 [0178.407] wcscpy_s (in: _Destination=0x696048, _SizeInWords=0x9, _Source="firewall" | out: _Destination="firewall") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699970 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688f28 [0178.407] wcscpy_s (in: _Destination=0x688f28, _SizeInWords=0x4, _Source="set" | out: _Destination="set") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6999b8 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xa) returned 0x6999d0 [0178.407] wcscpy_s (in: _Destination=0x6999d0, _SizeInWords=0x5, _Source="rule" | out: _Destination="rule") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6999e8 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x34) returned 0x691e90 [0178.407] wcscpy_s (in: _Destination=0x691e90, _SizeInWords=0x1a, _Source="\"group=Network Discovery\"" | out: _Destination="\"group=Network Discovery\"") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699940 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688ef8 [0178.407] wcscpy_s (in: _Destination=0x688ef8, _SizeInWords=0x4, _Source="new" | out: _Destination="new") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x6999a0 [0178.407] GetProcessHeap () returned 0x670000 [0178.407] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xe) returned 0x699958 [0178.407] wcscpy_s (in: _Destination=0x699958, _SizeInWords=0x7, _Source="enable" | out: _Destination="enable") returned 0x0 [0178.407] GetProcessHeap () returned 0x670000 [0178.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x699988 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x4) returned 0x688da8 [0178.408] wcscpy_s (in: _Destination=0x688da8, _SizeInWords=0x2, _Source="=" | out: _Destination="=") returned 0x0 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0xc) returned 0x697240 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x8) returned 0x688e58 [0178.408] wcscpy_s (in: _Destination=0x688e58, _SizeInWords=0x4, _Source="Yes" | out: _Destination="Yes") returned 0x0 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6a1a78) returned 1 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699898) returned 1 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696048) returned 1 [0178.408] GetProcessHeap () returned 0x670000 [0178.408] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x12) returned 0x696108 [0178.408] lstrcmpiW (lpString1="firewall", lpString2="routing") returned -1 [0178.408] lstrcmpiW (lpString1="firewall", lpString2="ip") returned -1 [0178.408] lstrcmpiW (lpString1="firewall", lpString2="ipv6") returned -1 [0178.408] lstrcmpiW (lpString1="firewall", lpString2="aaaa") returned 1 [0178.408] lstrcmpiW (lpString1="firewall", lpString2="ras") returned -1 [0178.408] _wcsnicmp (_String1="set", _String2="dum", _MaxCount=0x3) returned 15 [0178.409] _wcsnicmp (_String1="set", _String2="hel", _MaxCount=0x3) returned 11 [0178.409] _wcsnicmp (_String1="set", _String2="?", _MaxCount=0x3) returned 52 [0178.409] _wcsnicmp (_String1="set", _String2="add", _MaxCount=0x3) returned 18 [0178.409] _wcsnicmp (_String1="set", _String2="del", _MaxCount=0x3) returned 15 [0178.409] _wcsnicmp (_String1="set", _String2="set", _MaxCount=0x3) returned 0 [0178.409] _wcsnicmp (_String1="rule", _String2="help", _MaxCount=0x4) returned 10 [0178.409] _wcsnicmp (_String1="rule", _String2="?", _MaxCount=0x4) returned 51 [0178.409] wcstok (in: _String="rule", _Delimiter=" ", _Context=0x6979d0 | out: _String="rule", _Context=0x6979d0) returned="rule" [0178.409] _wcsnicmp (_String1="rule", _String2="rule", _MaxCount=0x4) returned 0 [0178.409] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x6979d0 | out: _String=0x0, _Context=0x6979d0) returned 0x0 [0178.409] lstrcmpiW (lpString1="firewall", lpString2="netsh") returned -1 [0178.409] WinSqmAddToStream () returned 0x2486 [0178.452] MatchTagsInCmdLine () returned 0x0 [0178.452] wcspbrk (_String="group=Network Discovery", _Control="=") returned="=Network Discovery" [0178.452] GetProcessHeap () returned 0x670000 [0178.452] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x30) returned 0x6989c0 [0178.452] wcscpy_s (in: _Destination=0x6989c0, _SizeInWords=0x18, _Source="group=Network Discovery" | out: _Destination="group=Network Discovery") returned 0x0 [0178.452] wcstok (in: _String="group=Network Discovery", _Delimiter="=", _Context=0x6989c0 | out: _String="group", _Context=0x6989c0) returned="group" [0178.453] _wcsnicmp (_String1="group", _String2="Name", _MaxCount=0x5) returned -7 [0178.453] _wcsnicmp (_String1="group", _String2="Direc", _MaxCount=0x5) returned 3 [0178.453] _wcsnicmp (_String1="group", _String2="Profi", _MaxCount=0x5) returned -9 [0178.453] _wcsnicmp (_String1="group", _String2="Local", _MaxCount=0x5) returned -5 [0178.453] _wcsnicmp (_String1="group", _String2="Remot", _MaxCount=0x5) returned -11 [0178.453] _wcsnicmp (_String1="group", _String2="Local", _MaxCount=0x5) returned -5 [0178.453] _wcsnicmp (_String1="group", _String2="Remot", _MaxCount=0x5) returned -11 [0178.453] _wcsnicmp (_String1="group", _String2="Progr", _MaxCount=0x5) returned -9 [0178.453] _wcsnicmp (_String1="group", _String2="Proto", _MaxCount=0x5) returned -9 [0178.453] _wcsnicmp (_String1="group", _String2="Servi", _MaxCount=0x5) returned -12 [0178.453] _wcsnicmp (_String1="group", _String2="Group", _MaxCount=0x5) returned 0 [0178.453] wcscpy_s (in: _Destination=0x691b10, _SizeInWords=0x18, _Source="Network Discovery" | out: _Destination="Network Discovery") returned 0x0 [0178.453] GetProcessHeap () returned 0x670000 [0178.453] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6989c0) returned 1 [0196.697] MatchTagsInCmdLine () returned 0x0 [0196.697] wcspbrk (_String="enable=Yes", _Control="=") returned="=Yes" [0196.697] GetProcessHeap () returned 0x670000 [0196.697] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x16) returned 0x6b7d430 [0196.697] wcscpy_s (in: _Destination=0x6b7d430, _SizeInWords=0xb, _Source="enable=Yes" | out: _Destination="enable=Yes") returned 0x0 [0196.697] wcstok (in: _String="enable=Yes", _Delimiter="=", _Context=0x6b7d430*="" | out: _String="enable", _Context=0x6b7d430*="") returned="enable" [0196.697] _wcsnicmp (_String1="enable", _String2="Enable", _MaxCount=0x6) returned 0 [0196.697] wcscpy_s (in: _Destination=0x696328, _SizeInWords=0xb, _Source="Yes" | out: _Destination="Yes") returned 0x0 [0196.697] GetProcessHeap () returned 0x670000 [0196.697] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6b7d430) returned 1 [0221.029] PrintMessageFromModule () returned 0x17 [0221.030] LoadStringW (in: hInstance=0x6ea10000, uID=0x20002b29, lpBuffer=0x18f4a4, cchBufferMax=16384 | out: lpBuffer="\nUpdated %1!u! rule(s).\n") returned 0x18 [0221.067] FormatMessageW (in: dwFlags=0x500, lpSource=0x18f4a4, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x18f488, nSize=0x0, Arguments=0x18f4a0 | out: lpBuffer="h璬\x19腣ų") returned 0x17 [0221.067] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0221.067] GetConsoleOutputCP () returned 0x1b5 [0221.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nUpdated 50 rule(s).\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0221.069] GetProcessHeap () returned 0x670000 [0221.069] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x18) returned 0x6b7d3f0 [0221.070] GetConsoleOutputCP () returned 0x1b5 [0221.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\nUpdated 50 rule(s).\r\n", cchWideChar=-1, lpMultiByteStr=0x6b7d3f0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nUpdated 50 rule(s).\r\n", lpUsedDefaultChar=0x0) returned 24 [0221.070] WriteFile (in: hFile=0x3c, lpBuffer=0x6b7d3f0*, nNumberOfBytesToWrite=0x17, lpNumberOfBytesWritten=0x18f474, lpOverlapped=0x0 | out: lpBuffer=0x6b7d3f0*, lpNumberOfBytesWritten=0x18f474*=0x17, lpOverlapped=0x0) returned 1 [0221.073] GetProcessHeap () returned 0x670000 [0221.073] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6b7d3f0) returned 1 [0221.073] LocalFree (hMem=0x68efa0) returned 0x0 [0221.073] LoadStringW (in: hInstance=0x0, uID=0x2, lpBuffer=0x18f93c, cchBufferMax=16384 | out: lpBuffer="Ok.\n") returned 0x4 [0221.074] FormatMessageW (in: dwFlags=0x500, lpSource=0x18f93c, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x18f920, nSize=0x0, Arguments=0x18f938 | out: lpBuffer="缨k祄\x19腣ųᆘ溦㪧") returned 0x5 [0221.074] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0221.074] GetConsoleOutputCP () returned 0x1b5 [0221.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0221.074] GetProcessHeap () returned 0x670000 [0221.074] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x6) returned 0x6a9b28 [0221.074] GetConsoleOutputCP () returned 0x1b5 [0221.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Ok.\r\n", cchWideChar=-1, lpMultiByteStr=0x6a9b28, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ok.\r\n", lpUsedDefaultChar=0x0) returned 6 [0221.074] WriteFile (in: hFile=0x3c, lpBuffer=0x6a9b28*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0x18f90c, lpOverlapped=0x0 | out: lpBuffer=0x6a9b28*, lpNumberOfBytesWritten=0x18f90c*=0x5, lpOverlapped=0x0) returned 1 [0221.075] GetProcessHeap () returned 0x670000 [0221.075] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6a9b28) returned 1 [0221.076] LocalFree (hMem=0x6b7f28) returned 0x0 [0221.076] FormatMessageW (in: dwFlags=0x500, lpSource=0x1731244, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x197938, nSize=0x0, Arguments=0x197944 | out: lpBuffer="꧐j祈\x19胐ų祔\x19祬\x19寯ųቄų秐i") returned 0x2 [0221.076] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0221.076] GetConsoleOutputCP () returned 0x1b5 [0221.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0221.076] GetProcessHeap () returned 0x670000 [0221.076] RtlAllocateHeap (HeapHandle=0x670000, Flags=0x0, Size=0x3) returned 0x6a9b38 [0221.076] GetConsoleOutputCP () returned 0x1b5 [0221.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x6a9b38, cbMultiByte=3, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3 [0221.076] WriteFile (in: hFile=0x3c, lpBuffer=0x6a9b38*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x197924, lpOverlapped=0x0 | out: lpBuffer=0x6a9b38*, lpNumberOfBytesWritten=0x197924*=0x2, lpOverlapped=0x0) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6a9b38) returned 1 [0221.077] LocalFree (hMem=0x6aa9d0) returned 0x0 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699910) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696148) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6962c8) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688fb8) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996e8) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x691b10) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x689028) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696328) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696bd0) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696008) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.077] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699628) returned 1 [0221.077] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x696168) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699778) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688f68) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699880) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699670) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699838) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x691e50) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996a0) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x689038) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699700) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699688) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6997a8) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688e98) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6997c0) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x688f98) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.078] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6996b8) returned 1 [0221.078] GetProcessHeap () returned 0x670000 [0221.079] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697498) returned 1 [0221.079] GetProcessHeap () returned 0x670000 [0221.079] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68ea30) returned 1 [0221.079] GetProcessHeap () returned 0x670000 [0221.079] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x68e880) returned 1 [0221.079] GetProcessHeap () returned 0x670000 [0221.079] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x697480) returned 1 [0221.111] GetProcessHeap () returned 0x670000 [0221.111] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x69cc28) returned 1 [0221.111] FreeLibrary (hLibModule=0x1730000) returned 1 [0221.111] FreeLibrary (hLibModule=0x6ee10000) returned 1 [0221.112] FreeLibrary (hLibModule=0x6edc0000) returned 1 [0221.131] free (_Block=0x8e3ad0) [0221.132] LocalFree (hMem=0x685398) returned 0x0 [0221.132] LocalFree (hMem=0x685518) returned 0x0 [0221.132] LocalFree (hMem=0x676a28) returned 0x0 [0221.132] LocalFree (hMem=0x681fe8) returned 0x0 [0221.132] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x6b7cd88 [0221.132] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6aa520 [0221.132] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x6aa640 [0221.133] free (_Block=0x8e3a50) [0221.133] free (_Block=0x0) [0221.133] free (_Block=0x8e1150) [0221.133] free (_Block=0x8e3a68) [0221.133] free (_Block=0x8e3ab0) [0221.133] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x6bb738 [0221.135] LocalFree (hMem=0x6bb738) returned 0x0 [0221.135] LocalFree (hMem=0x6855a8) returned 0x0 [0221.135] LocalFree (hMem=0x6b7cd88) returned 0x0 [0221.135] free (_Block=0x8e3948) [0221.136] GetModuleHandleA (lpModuleName="MSVCRT.DLL") returned 0x73fc0000 [0221.136] FreeLibrary (hLibModule=0x73fc0000) returned 1 [0221.136] LocalFree (hMem=0x6aa640) returned 0x0 [0221.136] LocalFree (hMem=0x6aa520) returned 0x0 [0221.136] GlobalHandle (pMem=0x685288) returned 0xc10004 [0221.136] GlobalUnlock (hMem=0xc10004) returned 0 [0221.145] FreeLibrary (hLibModule=0x6ea10000) returned 1 [0221.148] FreeLibrary (hLibModule=0x6e9d0000) returned 1 [0221.150] FreeLibrary (hLibModule=0x6e9b0000) returned 1 [0221.160] FreeLibrary (hLibModule=0x6e8b0000) returned 1 [0221.162] FreeLibrary (hLibModule=0x6e8a0000) returned 1 [0221.185] FreeLibrary (hLibModule=0x6e5b0000) returned 1 [0221.189] FreeLibrary (hLibModule=0x6e5a0000) returned 1 [0221.190] FreeLibrary (hLibModule=0x6e520000) returned 1 [0221.229] FreeLibrary (hLibModule=0x6e1e0000) returned 1 [0221.233] FreeLibrary (hLibModule=0x6e160000) returned 1 [0221.244] FreeLibrary (hLibModule=0x6e120000) returned 1 [0221.247] FreeLibrary (hLibModule=0x6e110000) returned 1 [0221.249] FreeLibrary (hLibModule=0x6e0d0000) returned 1 [0221.257] FreeLibrary (hLibModule=0x6e040000) returned 1 [0221.262] FreeLibrary (hLibModule=0x6df90000) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x699e00) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x670598) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676b08) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x677168) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676da0) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676db0) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678588) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678598) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.273] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6785a8) returned 1 [0221.273] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6785b8) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676b68) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676b78) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676b88) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676b98) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676ba8) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x676bb8) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e60) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e70) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d00) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d60) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.274] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678df0) returned 1 [0221.274] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d30) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678cc0) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e40) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e00) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ca0) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d90) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678cb0) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678cd0) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d20) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e50) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e20) returned 1 [0221.275] GetProcessHeap () returned 0x670000 [0221.275] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e10) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678e30) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d40) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d70) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d50) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d80) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678dc0) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678da0) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ce0) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678cf0) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.276] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678db0) returned 1 [0221.276] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678d10) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678dd0) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678de0) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f30) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679080) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678eb0) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f70) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678fd0) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f00) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679090) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f20) returned 1 [0221.277] GetProcessHeap () returned 0x670000 [0221.277] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f10) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f40) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679060) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f50) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679000) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ec0) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f60) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f80) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790a0) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ed0) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679010) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678fc0) returned 1 [0221.278] GetProcessHeap () returned 0x670000 [0221.278] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ee0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678f90) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678fa0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678fe0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678fb0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ff0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x678ef0) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679020) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.279] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679030) returned 1 [0221.279] GetProcessHeap () returned 0x670000 [0221.283] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679040) returned 1 [0221.283] GetProcessHeap () returned 0x670000 [0221.283] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679050) returned 1 [0221.283] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679070) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679220) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790e0) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679250) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679270) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790b0) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679240) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.284] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679100) returned 1 [0221.284] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679120) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679110) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790c0) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790d0) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679230) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679200) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679130) returned 1 [0221.288] GetProcessHeap () returned 0x670000 [0221.288] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679260) returned 1 [0221.291] GetProcessHeap () returned 0x670000 [0221.291] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6790f0) returned 1 [0221.291] GetProcessHeap () returned 0x670000 [0221.291] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791f0) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679140) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679160) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679150) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679170) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679180) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679190) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791a0) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791b0) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.292] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791c0) returned 1 [0221.292] GetProcessHeap () returned 0x670000 [0221.299] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679210) returned 1 [0221.299] GetProcessHeap () returned 0x670000 [0221.299] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791d0) returned 1 [0221.299] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6791e0) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794b8) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795f8) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679638) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679608) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679538) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795d8) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795c8) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679548) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679598) returned 1 [0221.300] GetProcessHeap () returned 0x670000 [0221.300] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679618) returned 1 [0221.301] GetProcessHeap () returned 0x670000 [0221.301] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679558) returned 1 [0221.301] GetProcessHeap () returned 0x670000 [0221.301] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679578) returned 1 [0221.301] GetProcessHeap () returned 0x670000 [0221.301] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679648) returned 1 [0221.301] GetProcessHeap () returned 0x670000 [0221.301] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794c8) returned 1 [0221.301] GetProcessHeap () returned 0x670000 [0221.301] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679628) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.378] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679658) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.378] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679668) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.378] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679678) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.378] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794d8) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.378] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795b8) returned 1 [0221.378] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679528) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794e8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679588) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794f8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679518) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679508) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679568) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795a8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6795e8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679348) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793d8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6794a8) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679388) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.379] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679498) returned 1 [0221.379] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679378) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6792b8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793e8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793a8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6792d8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793f8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6792c8) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679358) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679338) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679368) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.380] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679458) returned 1 [0221.380] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679398) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6792f8) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793b8) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679468) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679308) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679478) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679448) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679438) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679428) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679318) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679408) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679418) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679328) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6793c8) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.381] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679488) returned 1 [0221.381] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6792e8) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a50) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6798e0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679910) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a00) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799f0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a40) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6798c0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a30) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6798d0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a80) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799b0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a60) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6798f0) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a70) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.382] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679900) returned 1 [0221.382] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679920) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679930) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679940) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679950) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679960) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a10) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799c0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679990) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679970) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679980) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679a20) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799a0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799d0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6799e0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679770) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6796d0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.383] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6796f0) returned 1 [0221.383] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6798a0) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679740) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679720) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679850) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679730) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679700) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679810) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6796e0) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679820) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x6796c0) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679870) returned 1 [0221.384] GetProcessHeap () returned 0x670000 [0221.384] RtlFreeHeap (HeapHandle=0x670000, Flags=0x0, BaseAddress=0x679830) returned 1 [0221.384] exit (_Code=0) Thread: id = 122 os_tid = 0x1038 Thread: id = 123 os_tid = 0x1040 Thread: id = 145 os_tid = 0x13c4 Thread: id = 172 os_tid = 0x13cc Thread: id = 177 os_tid = 0x13b8 Thread: id = 178 os_tid = 0x12a0 [0221.106] LocalAlloc (uFlags=0x40, uBytes=0x178) returned 0x69d920 [0221.107] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x6aa640 [0221.107] LocalAlloc (uFlags=0x0, uBytes=0xc) returned 0x6aa418 [0221.107] LocalAlloc (uFlags=0x40, uBytes=0x84) returned 0x6bb738 [0221.107] LocalReAlloc (hMem=0x6aa418, uBytes=0x10, uFlags=0x2) returned 0x6b7f28 [0221.108] LocalFree (hMem=0x69d920) returned 0x0 [0221.108] LocalFree (hMem=0x6bb738) returned 0x0 [0221.108] LocalFree (hMem=0x6b7f28) returned 0x0 [0221.108] LocalFree (hMem=0x6aa640) returned 0x0 Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x5b59f000" os_pid = "0xbf4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0xb0" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f741" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 443 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 444 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 445 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 446 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 447 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 448 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 449 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 450 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 451 start_va = 0x7ff604400000 end_va = 0x7ff604410fff monitored = 0 entry_point = 0x7ff6044016b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 452 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 453 start_va = 0x7b0000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 454 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 455 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 456 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 457 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 458 start_va = 0x90000 end_va = 0x14dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 459 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 460 start_va = 0x150000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 461 start_va = 0x600000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 462 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 463 start_va = 0x7ffc1d710000 end_va = 0x7ffc1d768fff monitored = 0 entry_point = 0x7ffc1d71fbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 464 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 465 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 466 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 467 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 468 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 469 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1022 start_va = 0x1a0000 end_va = 0x1a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1023 start_va = 0x7ffc2d740000 end_va = 0x7ffc2d882fff monitored = 0 entry_point = 0x7ffc2d768210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1024 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1025 start_va = 0x7ffc2ced0000 end_va = 0x7ffc2cf0afff monitored = 0 entry_point = 0x7ffc2ced12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1026 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1027 start_va = 0x7ffc2a1f0000 end_va = 0x7ffc2a375fff monitored = 0 entry_point = 0x7ffc2a23d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1028 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1029 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1030 start_va = 0x8b0000 end_va = 0xa37fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 1031 start_va = 0xa40000 end_va = 0xbc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a40000" filename = "" Region: id = 1032 start_va = 0xbd0000 end_va = 0x1fcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bd0000" filename = "" Region: id = 1033 start_va = 0x1fd0000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1034 start_va = 0x600000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1035 start_va = 0x730000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 1036 start_va = 0x7ffc2daa0000 end_va = 0x7ffc2effefff monitored = 0 entry_point = 0x7ffc2dc011f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1037 start_va = 0x7ffc2c380000 end_va = 0x7ffc2c3c2fff monitored = 0 entry_point = 0x7ffc2c394b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1038 start_va = 0x7ffc2c430000 end_va = 0x7ffc2ca73fff monitored = 0 entry_point = 0x7ffc2c5f64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1039 start_va = 0x7ffc2d5b0000 end_va = 0x7ffc2d656fff monitored = 0 entry_point = 0x7ffc2d5c58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1040 start_va = 0x7ffc2d0a0000 end_va = 0x7ffc2d0f1fff monitored = 0 entry_point = 0x7ffc2d0af530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1041 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1042 start_va = 0x7ffc2c2a0000 end_va = 0x7ffc2c354fff monitored = 0 entry_point = 0x7ffc2c2e22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1043 start_va = 0x7ffc2bcc0000 end_va = 0x7ffc2bd0afff monitored = 0 entry_point = 0x7ffc2bcc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1044 start_va = 0x7ffc2bca0000 end_va = 0x7ffc2bcb3fff monitored = 0 entry_point = 0x7ffc2bca52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1048 start_va = 0x7ffc2a620000 end_va = 0x7ffc2a6b5fff monitored = 0 entry_point = 0x7ffc2a645570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1049 start_va = 0x2120000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 1051 start_va = 0x22a0000 end_va = 0x25d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1052 start_va = 0x25e0000 end_va = 0x27f7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000025e0000" filename = "" Region: id = 1053 start_va = 0x2800000 end_va = 0x2a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1054 start_va = 0x1fd0000 end_va = 0x20e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1055 start_va = 0x2110000 end_va = 0x211ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 1056 start_va = 0x2a20000 end_va = 0x2c38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a20000" filename = "" Region: id = 1057 start_va = 0x2120000 end_va = 0x2237fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 1058 start_va = 0x2290000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 1060 start_va = 0x640000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 1061 start_va = 0x7ffc2d890000 end_va = 0x7ffc2d9e9fff monitored = 0 entry_point = 0x7ffc2d8d38e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1063 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1064 start_va = 0x2c40000 end_va = 0x2cfbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002c40000" filename = "" Region: id = 1065 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1066 start_va = 0x7ffc29530000 end_va = 0x7ffc29551fff monitored = 0 entry_point = 0x7ffc29531a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1067 start_va = 0x7ffc2a3e0000 end_va = 0x7ffc2a3f2fff monitored = 0 entry_point = 0x7ffc2a3e2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1068 start_va = 0x7ffc2bab0000 end_va = 0x7ffc2bb05fff monitored = 0 entry_point = 0x7ffc2bac0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1069 start_va = 0x60000 end_va = 0x66fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 1070 start_va = 0x70000 end_va = 0x70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 1071 start_va = 0x80000 end_va = 0x80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 1072 start_va = 0x1d0000 end_va = 0x1d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1073 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 1075 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 1076 start_va = 0x7ffc22a50000 end_va = 0x7ffc22cc3fff monitored = 0 entry_point = 0x7ffc22ac0400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 1077 start_va = 0x680000 end_va = 0x680fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1078 start_va = 0x690000 end_va = 0x691fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Thread: id = 11 os_tid = 0xab8 Thread: id = 12 os_tid = 0xec4 Thread: id = 119 os_tid = 0x600 Thread: id = 121 os_tid = 0x44c Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x73331000" os_pid = "0x3e4" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x208" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cc92" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 474 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 475 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 476 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 477 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 478 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 479 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 480 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 481 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 482 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 483 start_va = 0x120000 end_va = 0x12ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 484 start_va = 0x130000 end_va = 0x130fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 485 start_va = 0x140000 end_va = 0x141fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 486 start_va = 0x150000 end_va = 0x156fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 487 start_va = 0x160000 end_va = 0x16ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 488 start_va = 0x170000 end_va = 0x17ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 489 start_va = 0x180000 end_va = 0x180fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 490 start_va = 0x190000 end_va = 0x196fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 491 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 492 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 493 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 494 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 495 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 496 start_va = 0x1f0000 end_va = 0x1fcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 497 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 498 start_va = 0x400000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 499 start_va = 0x500000 end_va = 0x5bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 500 start_va = 0x5c0000 end_va = 0x747fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 501 start_va = 0x750000 end_va = 0x75cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 502 start_va = 0x760000 end_va = 0x761fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 503 start_va = 0x770000 end_va = 0x773fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 504 start_va = 0x780000 end_va = 0x783fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 505 start_va = 0x790000 end_va = 0x7a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 506 start_va = 0x7b0000 end_va = 0x7b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 507 start_va = 0x7c0000 end_va = 0x7c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 508 start_va = 0x7d0000 end_va = 0x7d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 509 start_va = 0x7e0000 end_va = 0x7e4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 510 start_va = 0x7f0000 end_va = 0x7f8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 511 start_va = 0x800000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000800000" filename = "" Region: id = 512 start_va = 0x900000 end_va = 0xa80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 513 start_va = 0xa90000 end_va = 0xb4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a90000" filename = "" Region: id = 514 start_va = 0xb50000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 515 start_va = 0xc50000 end_va = 0xc94fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db") Region: id = 516 start_va = 0xca0000 end_va = 0xca1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 517 start_va = 0xcb0000 end_va = 0xcb1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 518 start_va = 0xcc0000 end_va = 0xcc6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 519 start_va = 0xcd0000 end_va = 0xcd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "newdev.dll.mui" filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui") Region: id = 520 start_va = 0xce0000 end_va = 0xce0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 521 start_va = 0xcf0000 end_va = 0xcf3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 522 start_va = 0xd00000 end_va = 0xdfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 523 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 524 start_va = 0xf00000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 525 start_va = 0x1000000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 526 start_va = 0x1100000 end_va = 0x117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 527 start_va = 0x1180000 end_va = 0x1186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001180000" filename = "" Region: id = 528 start_va = 0x1190000 end_va = 0x1196fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001190000" filename = "" Region: id = 529 start_va = 0x11a0000 end_va = 0x11e2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011a0000" filename = "" Region: id = 530 start_va = 0x11f0000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 531 start_va = 0x1200000 end_va = 0x12fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 532 start_va = 0x1300000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 533 start_va = 0x1400000 end_va = 0x14fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 534 start_va = 0x1500000 end_va = 0x15fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 535 start_va = 0x1600000 end_va = 0x1936fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 536 start_va = 0x1940000 end_va = 0x1a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 537 start_va = 0x1a40000 end_va = 0x1b1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 538 start_va = 0x1b20000 end_va = 0x1b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b20000" filename = "" Region: id = 539 start_va = 0x1b30000 end_va = 0x1b30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b30000" filename = "" Region: id = 540 start_va = 0x1b40000 end_va = 0x1c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b40000" filename = "" Region: id = 541 start_va = 0x1c40000 end_va = 0x1cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 542 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 543 start_va = 0x1cd0000 end_va = 0x1cd3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cd0000" filename = "" Region: id = 544 start_va = 0x1ce0000 end_va = 0x1ce1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ce0000" filename = "" Region: id = 545 start_va = 0x1cf0000 end_va = 0x1cf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 546 start_va = 0x1d00000 end_va = 0x1dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 547 start_va = 0x1e00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 548 start_va = 0x1f00000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 549 start_va = 0x1f80000 end_va = 0x207ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 550 start_va = 0x2080000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 551 start_va = 0x2100000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 552 start_va = 0x2200000 end_va = 0x22fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 553 start_va = 0x2300000 end_va = 0x237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 554 start_va = 0x2380000 end_va = 0x247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 555 start_va = 0x2480000 end_va = 0x257ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002480000" filename = "" Region: id = 556 start_va = 0x2580000 end_va = 0x25fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002580000" filename = "" Region: id = 557 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 558 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 559 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 560 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 561 start_va = 0x2a00000 end_va = 0x2a8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 562 start_va = 0x2a90000 end_va = 0x2b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 563 start_va = 0x2b10000 end_va = 0x2b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b10000" filename = "" Region: id = 564 start_va = 0x2b90000 end_va = 0x2c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 565 start_va = 0x2c90000 end_va = 0x2d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c90000" filename = "" Region: id = 566 start_va = 0x2d90000 end_va = 0x2e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d90000" filename = "" Region: id = 567 start_va = 0x2e90000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 568 start_va = 0x2f10000 end_va = 0x2f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 569 start_va = 0x2f90000 end_va = 0x308ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f90000" filename = "" Region: id = 570 start_va = 0x3090000 end_va = 0x318ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003090000" filename = "" Region: id = 571 start_va = 0x3190000 end_va = 0x320ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003190000" filename = "" Region: id = 572 start_va = 0x3210000 end_va = 0x330ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003210000" filename = "" Region: id = 573 start_va = 0x3310000 end_va = 0x340ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003310000" filename = "" Region: id = 574 start_va = 0x3410000 end_va = 0x348ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003410000" filename = "" Region: id = 575 start_va = 0x3490000 end_va = 0x349ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003490000" filename = "" Region: id = 576 start_va = 0x34a0000 end_va = 0x34a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034a0000" filename = "" Region: id = 577 start_va = 0x34b0000 end_va = 0x34b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034b0000" filename = "" Region: id = 578 start_va = 0x34c0000 end_va = 0x353ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000034c0000" filename = "" Region: id = 579 start_va = 0x3540000 end_va = 0x354ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003540000" filename = "" Region: id = 580 start_va = 0x3550000 end_va = 0x355ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003550000" filename = "" Region: id = 581 start_va = 0x3560000 end_va = 0x356ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003560000" filename = "" Region: id = 582 start_va = 0x3570000 end_va = 0x357ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003570000" filename = "" Region: id = 583 start_va = 0x3580000 end_va = 0x358ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003580000" filename = "" Region: id = 584 start_va = 0x3590000 end_va = 0x359ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003590000" filename = "" Region: id = 585 start_va = 0x35a0000 end_va = 0x35a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035a0000" filename = "" Region: id = 586 start_va = 0x35b0000 end_va = 0x35b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035b0000" filename = "" Region: id = 587 start_va = 0x35c0000 end_va = 0x36bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000035c0000" filename = "" Region: id = 588 start_va = 0x36c0000 end_va = 0x37bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036c0000" filename = "" Region: id = 589 start_va = 0x37c0000 end_va = 0x37dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000037c0000" filename = "" Region: id = 590 start_va = 0x37e0000 end_va = 0x37effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 591 start_va = 0x37f0000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000037f0000" filename = "" Region: id = 592 start_va = 0x3800000 end_va = 0x38fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 593 start_va = 0x3900000 end_va = 0x39fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 594 start_va = 0x3a00000 end_va = 0x3a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a00000" filename = "" Region: id = 595 start_va = 0x3a80000 end_va = 0x3b7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003a80000" filename = "" Region: id = 596 start_va = 0x3b80000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b80000" filename = "" Region: id = 597 start_va = 0x3c00000 end_va = 0x3cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 598 start_va = 0x3d00000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d00000" filename = "" Region: id = 599 start_va = 0x3e00000 end_va = 0x3efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 600 start_va = 0x3f00000 end_va = 0x3f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 601 start_va = 0x3f80000 end_va = 0x3f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 602 start_va = 0x3f90000 end_va = 0x3f9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f90000" filename = "" Region: id = 603 start_va = 0x3fa0000 end_va = 0x3faffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003fa0000" filename = "" Region: id = 604 start_va = 0x3fb0000 end_va = 0x3fb6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003fb0000" filename = "" Region: id = 605 start_va = 0x3fc0000 end_va = 0x3fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003fc0000" filename = "" Region: id = 606 start_va = 0x3fd0000 end_va = 0x3fdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 607 start_va = 0x3fe0000 end_va = 0x3feffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 608 start_va = 0x3ff0000 end_va = 0x3ff3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ff0000" filename = "" Region: id = 609 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 610 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 611 start_va = 0x4200000 end_va = 0x420ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 612 start_va = 0x4210000 end_va = 0x421ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 613 start_va = 0x4220000 end_va = 0x4226fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004220000" filename = "" Region: id = 614 start_va = 0x4230000 end_va = 0x432ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004230000" filename = "" Region: id = 615 start_va = 0x4330000 end_va = 0x43affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004330000" filename = "" Region: id = 616 start_va = 0x43b0000 end_va = 0x43fdfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000043b0000" filename = "" Region: id = 617 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 618 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 619 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 620 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 621 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 622 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 623 start_va = 0x4a00000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 624 start_va = 0x4b00000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 625 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 626 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 627 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 628 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 629 start_va = 0x5000000 end_va = 0x50fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 630 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 631 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 632 start_va = 0x5400000 end_va = 0x544dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005400000" filename = "" Region: id = 633 start_va = 0x5450000 end_va = 0x545ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005450000" filename = "" Region: id = 634 start_va = 0x5460000 end_va = 0x546ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005460000" filename = "" Region: id = 635 start_va = 0x5470000 end_va = 0x547ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005470000" filename = "" Region: id = 636 start_va = 0x5480000 end_va = 0x548ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005480000" filename = "" Region: id = 637 start_va = 0x5490000 end_va = 0x549ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005490000" filename = "" Region: id = 638 start_va = 0x54a0000 end_va = 0x54affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000054a0000" filename = "" Region: id = 639 start_va = 0x54b0000 end_va = 0x54bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 640 start_va = 0x54c0000 end_va = 0x54cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000054c0000" filename = "" Region: id = 641 start_va = 0x54d0000 end_va = 0x54dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 642 start_va = 0x54e0000 end_va = 0x54effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 643 start_va = 0x54f0000 end_va = 0x54fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 644 start_va = 0x5600000 end_va = 0x560ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 645 start_va = 0x5610000 end_va = 0x561ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 646 start_va = 0x5620000 end_va = 0x562ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 647 start_va = 0x5630000 end_va = 0x563ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 648 start_va = 0x5640000 end_va = 0x564ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 649 start_va = 0x5650000 end_va = 0x565ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 650 start_va = 0x5660000 end_va = 0x56dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005660000" filename = "" Region: id = 651 start_va = 0x56e0000 end_va = 0x56effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 652 start_va = 0x56f0000 end_va = 0x56f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 653 start_va = 0x5700000 end_va = 0x5706fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005700000" filename = "" Region: id = 654 start_va = 0x5710000 end_va = 0x5713fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 655 start_va = 0x5720000 end_va = 0x5720fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005720000" filename = "" Region: id = 656 start_va = 0x5730000 end_va = 0x573ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 657 start_va = 0x5740000 end_va = 0x5742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 658 start_va = 0x5750000 end_va = 0x5756fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005750000" filename = "" Region: id = 659 start_va = 0x5760000 end_va = 0x585ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005760000" filename = "" Region: id = 660 start_va = 0x5860000 end_va = 0x5860fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shcore.dll.mui" filename = "\\Windows\\System32\\en-US\\SHCore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\shcore.dll.mui") Region: id = 661 start_va = 0x5870000 end_va = 0x5879fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 662 start_va = 0x5880000 end_va = 0x5890fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 663 start_va = 0x58a0000 end_va = 0x58b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 664 start_va = 0x58c0000 end_va = 0x58d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 665 start_va = 0x58e0000 end_va = 0x58f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 666 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 667 start_va = 0x5a00000 end_va = 0x5afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a00000" filename = "" Region: id = 668 start_va = 0x5b00000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b00000" filename = "" Region: id = 669 start_va = 0x5c00000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 670 start_va = 0x5d00000 end_va = 0x5dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 671 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 672 start_va = 0x5f00000 end_va = 0x5f0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 673 start_va = 0x5f10000 end_va = 0x5f1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 674 start_va = 0x5f20000 end_va = 0x5f2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 675 start_va = 0x5f30000 end_va = 0x5f3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 676 start_va = 0x5f40000 end_va = 0x5f4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 677 start_va = 0x5f50000 end_va = 0x5f5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 678 start_va = 0x5f60000 end_va = 0x5f6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 679 start_va = 0x5f70000 end_va = 0x5f7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 680 start_va = 0x5f80000 end_va = 0x5f8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 681 start_va = 0x5f90000 end_va = 0x5f9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 682 start_va = 0x5fa0000 end_va = 0x5faffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 683 start_va = 0x5fb0000 end_va = 0x5fbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 684 start_va = 0x5fc0000 end_va = 0x5fcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 685 start_va = 0x5fd0000 end_va = 0x5fdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 686 start_va = 0x5fe0000 end_va = 0x5feffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 687 start_va = 0x5ff0000 end_va = 0x5ffffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 688 start_va = 0x6000000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006000000" filename = "" Region: id = 689 start_va = 0x6100000 end_va = 0x610ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 690 start_va = 0x6110000 end_va = 0x611ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 691 start_va = 0x6120000 end_va = 0x612ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 692 start_va = 0x6130000 end_va = 0x6133fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winhttp.dll.mui" filename = "\\Windows\\System32\\en-US\\winhttp.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winhttp.dll.mui") Region: id = 693 start_va = 0x6240000 end_va = 0x624ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 694 start_va = 0x6250000 end_va = 0x625ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 695 start_va = 0x6270000 end_va = 0x627ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 696 start_va = 0x6280000 end_va = 0x628ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 697 start_va = 0x6290000 end_va = 0x629ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 698 start_va = 0x62a0000 end_va = 0x62affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 699 start_va = 0x62b0000 end_va = 0x62bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 700 start_va = 0x62c0000 end_va = 0x62cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 701 start_va = 0x62d0000 end_va = 0x62dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 702 start_va = 0x62e0000 end_va = 0x62effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 703 start_va = 0x62f0000 end_va = 0x62fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 704 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 705 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 706 start_va = 0x6500000 end_va = 0x65fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006500000" filename = "" Region: id = 707 start_va = 0x6600000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 708 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 709 start_va = 0x6900000 end_va = 0x6910fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 710 start_va = 0x6920000 end_va = 0x6930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 711 start_va = 0x6940000 end_va = 0x6950fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 712 start_va = 0x6960000 end_va = 0x6987fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 713 start_va = 0x6990000 end_va = 0x69c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 714 start_va = 0x69d0000 end_va = 0x69e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 715 start_va = 0x69f0000 end_va = 0x6a00fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 716 start_va = 0x6a10000 end_va = 0x6a40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 717 start_va = 0x6a50000 end_va = 0x6a80fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 718 start_va = 0x6a90000 end_va = 0x6a9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 719 start_va = 0x6aa0000 end_va = 0x6aaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 720 start_va = 0x6ab0000 end_va = 0x6abffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 721 start_va = 0x6ac0000 end_va = 0x6acffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 722 start_va = 0x6ad0000 end_va = 0x6adffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 723 start_va = 0x6ae0000 end_va = 0x6aeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 724 start_va = 0x6af0000 end_va = 0x6afffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 725 start_va = 0x6b00000 end_va = 0x6b0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 726 start_va = 0x6b10000 end_va = 0x6b1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 727 start_va = 0x6b20000 end_va = 0x6b2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 728 start_va = 0x6b30000 end_va = 0x6b3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 729 start_va = 0x6b40000 end_va = 0x6b4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 730 start_va = 0x6b50000 end_va = 0x6b5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 731 start_va = 0x6b60000 end_va = 0x6b6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 732 start_va = 0x6b70000 end_va = 0x6b7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 733 start_va = 0x6b80000 end_va = 0x6b8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 734 start_va = 0x6b90000 end_va = 0x6b9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 735 start_va = 0x6ba0000 end_va = 0x6baffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 736 start_va = 0x6bb0000 end_va = 0x6bbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 737 start_va = 0x6bc0000 end_va = 0x6bcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 738 start_va = 0x6bd0000 end_va = 0x6bdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 739 start_va = 0x6be0000 end_va = 0x6beffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 740 start_va = 0x6bf0000 end_va = 0x6bfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 741 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 742 start_va = 0x6d00000 end_va = 0x6d0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 743 start_va = 0x6d10000 end_va = 0x6d1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 744 start_va = 0x6d20000 end_va = 0x6d2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 745 start_va = 0x6d30000 end_va = 0x6d3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 746 start_va = 0x6d40000 end_va = 0x6d4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 747 start_va = 0x6d50000 end_va = 0x6d5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 748 start_va = 0x6d60000 end_va = 0x6d6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 749 start_va = 0x6d70000 end_va = 0x6d7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 750 start_va = 0x6d80000 end_va = 0x6d8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 751 start_va = 0x6d90000 end_va = 0x6d9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 752 start_va = 0x6da0000 end_va = 0x6daffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 753 start_va = 0x6db0000 end_va = 0x6dbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 754 start_va = 0x6dc0000 end_va = 0x6dcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 755 start_va = 0x6dd0000 end_va = 0x6ddffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 756 start_va = 0x6de0000 end_va = 0x6deffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 757 start_va = 0x6df0000 end_va = 0x6dfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 758 start_va = 0x6e00000 end_va = 0x6e0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 759 start_va = 0x6e10000 end_va = 0x6e1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 760 start_va = 0x6e20000 end_va = 0x6e2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 761 start_va = 0x6e30000 end_va = 0x6e3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 762 start_va = 0x6e40000 end_va = 0x6e4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 763 start_va = 0x6e50000 end_va = 0x6e5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 764 start_va = 0x6e60000 end_va = 0x6e6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 765 start_va = 0x6e70000 end_va = 0x6e7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 766 start_va = 0x6e80000 end_va = 0x6e8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 767 start_va = 0x6e90000 end_va = 0x6e9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 768 start_va = 0x6ea0000 end_va = 0x6eaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 769 start_va = 0x6eb0000 end_va = 0x6ebffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 770 start_va = 0x6ec0000 end_va = 0x6ecffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 771 start_va = 0x6ed0000 end_va = 0x6edffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 772 start_va = 0x6ee0000 end_va = 0x6eeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 773 start_va = 0x6ef0000 end_va = 0x6efffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 774 start_va = 0x6f00000 end_va = 0x6f0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 775 start_va = 0x6f10000 end_va = 0x6f1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 776 start_va = 0x6f20000 end_va = 0x6f2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 777 start_va = 0x6f30000 end_va = 0x6f3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 778 start_va = 0x6f40000 end_va = 0x6f4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 779 start_va = 0x6f50000 end_va = 0x6f5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 780 start_va = 0x6f60000 end_va = 0x6f60fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 781 start_va = 0x6f70000 end_va = 0x6f71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006f70000" filename = "" Region: id = 782 start_va = 0x6f80000 end_va = 0x6f97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f80000" filename = "" Region: id = 783 start_va = 0x7010000 end_va = 0x710ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007010000" filename = "" Region: id = 784 start_va = 0x7200000 end_va = 0x72fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007200000" filename = "" Region: id = 785 start_va = 0x7300000 end_va = 0x73fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007300000" filename = "" Region: id = 786 start_va = 0x7410000 end_va = 0x750ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007410000" filename = "" Region: id = 787 start_va = 0x7510000 end_va = 0x760ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007510000" filename = "" Region: id = 788 start_va = 0x7610000 end_va = 0x770ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007610000" filename = "" Region: id = 789 start_va = 0x7710000 end_va = 0x780ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007710000" filename = "" Region: id = 790 start_va = 0x7b10000 end_va = 0x7c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b10000" filename = "" Region: id = 791 start_va = 0x7c10000 end_va = 0x7d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c10000" filename = "" Region: id = 792 start_va = 0x8610000 end_va = 0x870ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 793 start_va = 0x8c00000 end_va = 0x8cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c00000" filename = "" Region: id = 794 start_va = 0x8d00000 end_va = 0x8dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d00000" filename = "" Region: id = 795 start_va = 0x8e00000 end_va = 0x8efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008e00000" filename = "" Region: id = 796 start_va = 0x8f00000 end_va = 0x8ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008f00000" filename = "" Region: id = 797 start_va = 0x9000000 end_va = 0x90fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009000000" filename = "" Region: id = 798 start_va = 0x9100000 end_va = 0x91fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009100000" filename = "" Region: id = 799 start_va = 0x9200000 end_va = 0x92fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009200000" filename = "" Region: id = 800 start_va = 0x9300000 end_va = 0x93fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009300000" filename = "" Region: id = 801 start_va = 0x9400000 end_va = 0x94fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009400000" filename = "" Region: id = 802 start_va = 0x9500000 end_va = 0x95fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009500000" filename = "" Region: id = 803 start_va = 0x9600000 end_va = 0x96fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009600000" filename = "" Region: id = 804 start_va = 0x9700000 end_va = 0x97fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009700000" filename = "" Region: id = 805 start_va = 0x9800000 end_va = 0x98fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009800000" filename = "" Region: id = 806 start_va = 0x9900000 end_va = 0x99fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009900000" filename = "" Region: id = 807 start_va = 0x9a00000 end_va = 0xa9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009a00000" filename = "" Region: id = 808 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 809 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 810 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 811 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 812 start_va = 0x7ff6ab660000 end_va = 0x7ff6ab66cfff monitored = 0 entry_point = 0x7ff6ab663980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 813 start_va = 0x7ffc11080000 end_va = 0x7ffc1132ffff monitored = 0 entry_point = 0x7ffc11081cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 814 start_va = 0x7ffc14680000 end_va = 0x7ffc146b1fff monitored = 0 entry_point = 0x7ffc1468b0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 815 start_va = 0x7ffc14830000 end_va = 0x7ffc14873fff monitored = 0 entry_point = 0x7ffc148583e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 816 start_va = 0x7ffc14880000 end_va = 0x7ffc1498efff monitored = 0 entry_point = 0x7ffc148bc010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 817 start_va = 0x7ffc149a0000 end_va = 0x7ffc149b6fff monitored = 0 entry_point = 0x7ffc149a7520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 818 start_va = 0x7ffc14ac0000 end_va = 0x7ffc14ad7fff monitored = 0 entry_point = 0x7ffc14acb850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 819 start_va = 0x7ffc14ae0000 end_va = 0x7ffc14af7fff monitored = 0 entry_point = 0x7ffc14ae1b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 820 start_va = 0x7ffc14fd0000 end_va = 0x7ffc15015fff monitored = 0 entry_point = 0x7ffc14fd79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 821 start_va = 0x7ffc15f20000 end_va = 0x7ffc1603cfff monitored = 0 entry_point = 0x7ffc15f4fe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 822 start_va = 0x7ffc17580000 end_va = 0x7ffc17591fff monitored = 0 entry_point = 0x7ffc17581a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 823 start_va = 0x7ffc17820000 end_va = 0x7ffc17830fff monitored = 0 entry_point = 0x7ffc178228d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 824 start_va = 0x7ffc19fc0000 end_va = 0x7ffc19ff5fff monitored = 0 entry_point = 0x7ffc19fc27f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 825 start_va = 0x7ffc1bf50000 end_va = 0x7ffc1bfd3fff monitored = 0 entry_point = 0x7ffc1bf68d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 826 start_va = 0x7ffc1bfe0000 end_va = 0x7ffc1c0b5fff monitored = 0 entry_point = 0x7ffc1c00a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 827 start_va = 0x7ffc1c130000 end_va = 0x7ffc1c193fff monitored = 0 entry_point = 0x7ffc1c14bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 828 start_va = 0x7ffc1c1a0000 end_va = 0x7ffc1c1c4fff monitored = 0 entry_point = 0x7ffc1c1a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 829 start_va = 0x7ffc1c1d0000 end_va = 0x7ffc1c1e3fff monitored = 0 entry_point = 0x7ffc1c1d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 830 start_va = 0x7ffc1c1f0000 end_va = 0x7ffc1c2e5fff monitored = 0 entry_point = 0x7ffc1c229590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 831 start_va = 0x7ffc1c2f0000 end_va = 0x7ffc1c363fff monitored = 0 entry_point = 0x7ffc1c305eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 832 start_va = 0x7ffc1c370000 end_va = 0x7ffc1c4a6fff monitored = 0 entry_point = 0x7ffc1c3b0480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 833 start_va = 0x7ffc1c4b0000 end_va = 0x7ffc1c4befff monitored = 0 entry_point = 0x7ffc1c4b4960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 834 start_va = 0x7ffc1c4c0000 end_va = 0x7ffc1c4cffff monitored = 0 entry_point = 0x7ffc1c4c1690 region_type = mapped_file name = "wups.dll" filename = "\\Windows\\System32\\wups.dll" (normalized: "c:\\windows\\system32\\wups.dll") Region: id = 835 start_va = 0x7ffc1c500000 end_va = 0x7ffc1c512fff monitored = 0 entry_point = 0x7ffc1c501b10 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 836 start_va = 0x7ffc1c520000 end_va = 0x7ffc1c5a1fff monitored = 0 entry_point = 0x7ffc1c521790 region_type = mapped_file name = "newdev.dll" filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll") Region: id = 837 start_va = 0x7ffc1c5b0000 end_va = 0x7ffc1c633fff monitored = 0 entry_point = 0x7ffc1c5c2830 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 838 start_va = 0x7ffc1c640000 end_va = 0x7ffc1c6a4fff monitored = 0 entry_point = 0x7ffc1c653170 region_type = mapped_file name = "wuuhext.dll" filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll") Region: id = 839 start_va = 0x7ffc1c6b0000 end_va = 0x7ffc1c8e5fff monitored = 0 entry_point = 0x7ffc1c73a450 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 840 start_va = 0x7ffc1c8f0000 end_va = 0x7ffc1c905fff monitored = 0 entry_point = 0x7ffc1c8f1af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 841 start_va = 0x7ffc1c960000 end_va = 0x7ffc1c970fff monitored = 0 entry_point = 0x7ffc1c962fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 842 start_va = 0x7ffc1c980000 end_va = 0x7ffc1ca01fff monitored = 0 entry_point = 0x7ffc1c982a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 843 start_va = 0x7ffc1ca20000 end_va = 0x7ffc1ca39fff monitored = 0 entry_point = 0x7ffc1ca22330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 844 start_va = 0x7ffc1ca40000 end_va = 0x7ffc1ca4cfff monitored = 0 entry_point = 0x7ffc1ca41420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 845 start_va = 0x7ffc1ca70000 end_va = 0x7ffc1ca80fff monitored = 0 entry_point = 0x7ffc1ca77480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 846 start_va = 0x7ffc1caa0000 end_va = 0x7ffc1cab5fff monitored = 0 entry_point = 0x7ffc1caa55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 847 start_va = 0x7ffc1cac0000 end_va = 0x7ffc1cae1fff monitored = 0 entry_point = 0x7ffc1cad2540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 848 start_va = 0x7ffc1caf0000 end_va = 0x7ffc1cbc4fff monitored = 0 entry_point = 0x7ffc1cb0cf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 849 start_va = 0x7ffc1d980000 end_va = 0x7ffc1d9c1fff monitored = 0 entry_point = 0x7ffc1d983670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 850 start_va = 0x7ffc1da40000 end_va = 0x7ffc1da7ffff monitored = 0 entry_point = 0x7ffc1da4cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 851 start_va = 0x7ffc1da80000 end_va = 0x7ffc1dac6fff monitored = 0 entry_point = 0x7ffc1da81d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 852 start_va = 0x7ffc1dc80000 end_va = 0x7ffc1dc9efff monitored = 0 entry_point = 0x7ffc1dc837e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 853 start_va = 0x7ffc1dca0000 end_va = 0x7ffc1dd18fff monitored = 0 entry_point = 0x7ffc1dca76a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 854 start_va = 0x7ffc1de30000 end_va = 0x7ffc1de47fff monitored = 0 entry_point = 0x7ffc1de34e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 855 start_va = 0x7ffc1de50000 end_va = 0x7ffc1de74fff monitored = 0 entry_point = 0x7ffc1de55ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 856 start_va = 0x7ffc1deb0000 end_va = 0x7ffc1e129fff monitored = 0 entry_point = 0x7ffc1deca7a0 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 857 start_va = 0x7ffc1e130000 end_va = 0x7ffc1e170fff monitored = 0 entry_point = 0x7ffc1e133750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 858 start_va = 0x7ffc1e180000 end_va = 0x7ffc1e272fff monitored = 0 entry_point = 0x7ffc1e1a5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 859 start_va = 0x7ffc1e310000 end_va = 0x7ffc1e3b2fff monitored = 0 entry_point = 0x7ffc1e312c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 860 start_va = 0x7ffc1e3c0000 end_va = 0x7ffc1e411fff monitored = 0 entry_point = 0x7ffc1e3c5770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 861 start_va = 0x7ffc1e420000 end_va = 0x7ffc1e44dfff monitored = 1 entry_point = 0x7ffc1e422300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 862 start_va = 0x7ffc1e450000 end_va = 0x7ffc1e4adfff monitored = 0 entry_point = 0x7ffc1e455080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 863 start_va = 0x7ffc1e4b0000 end_va = 0x7ffc1e4cffff monitored = 0 entry_point = 0x7ffc1e4b1f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 864 start_va = 0x7ffc1e4d0000 end_va = 0x7ffc1e4d8fff monitored = 0 entry_point = 0x7ffc1e4d18f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 865 start_va = 0x7ffc1e4e0000 end_va = 0x7ffc1e4f0fff monitored = 0 entry_point = 0x7ffc1e4e1d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 866 start_va = 0x7ffc1e500000 end_va = 0x7ffc1e50bfff monitored = 0 entry_point = 0x7ffc1e5035c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 867 start_va = 0x7ffc1e530000 end_va = 0x7ffc1e547fff monitored = 0 entry_point = 0x7ffc1e532000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 868 start_va = 0x7ffc1e550000 end_va = 0x7ffc1e6d1fff monitored = 0 entry_point = 0x7ffc1e5682a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 869 start_va = 0x7ffc1e710000 end_va = 0x7ffc1e75bfff monitored = 0 entry_point = 0x7ffc1e725310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 870 start_va = 0x7ffc1e760000 end_va = 0x7ffc1e7defff monitored = 0 entry_point = 0x7ffc1e777110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 871 start_va = 0x7ffc1e7e0000 end_va = 0x7ffc1e81bfff monitored = 0 entry_point = 0x7ffc1e7e6aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 872 start_va = 0x7ffc1e820000 end_va = 0x7ffc1e854fff monitored = 0 entry_point = 0x7ffc1e82a270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 873 start_va = 0x7ffc1fd10000 end_va = 0x7ffc20008fff monitored = 0 entry_point = 0x7ffc1fdd7280 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 874 start_va = 0x7ffc200d0000 end_va = 0x7ffc20409fff monitored = 0 entry_point = 0x7ffc200d8520 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 875 start_va = 0x7ffc20980000 end_va = 0x7ffc20989fff monitored = 0 entry_point = 0x7ffc20981350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 876 start_va = 0x7ffc20cd0000 end_va = 0x7ffc20d0ffff monitored = 0 entry_point = 0x7ffc20ce6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 877 start_va = 0x7ffc20d10000 end_va = 0x7ffc20d18fff monitored = 0 entry_point = 0x7ffc20d121d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 878 start_va = 0x7ffc20dd0000 end_va = 0x7ffc20de1fff monitored = 0 entry_point = 0x7ffc20dd3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 879 start_va = 0x7ffc20df0000 end_va = 0x7ffc20e1efff monitored = 0 entry_point = 0x7ffc20dfec60 region_type = mapped_file name = "cryptnet.dll" filename = "\\Windows\\System32\\cryptnet.dll" (normalized: "c:\\windows\\system32\\cryptnet.dll") Region: id = 880 start_va = 0x7ffc20e50000 end_va = 0x7ffc20e63fff monitored = 0 entry_point = 0x7ffc20e53710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 881 start_va = 0x7ffc20e70000 end_va = 0x7ffc20e97fff monitored = 0 entry_point = 0x7ffc20e7efc0 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Region: id = 882 start_va = 0x7ffc20f00000 end_va = 0x7ffc20f1dfff monitored = 0 entry_point = 0x7ffc20f0ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 883 start_va = 0x7ffc21020000 end_va = 0x7ffc2109ffff monitored = 0 entry_point = 0x7ffc2104d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 884 start_va = 0x7ffc210d0000 end_va = 0x7ffc210e5fff monitored = 0 entry_point = 0x7ffc210d1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 885 start_va = 0x7ffc239a0000 end_va = 0x7ffc239a9fff monitored = 0 entry_point = 0x7ffc239a14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 886 start_va = 0x7ffc239f0000 end_va = 0x7ffc23a0afff monitored = 0 entry_point = 0x7ffc239f1040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 887 start_va = 0x7ffc23d00000 end_va = 0x7ffc23d14fff monitored = 0 entry_point = 0x7ffc23d02dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 888 start_va = 0x7ffc24010000 end_va = 0x7ffc2401dfff monitored = 0 entry_point = 0x7ffc24011460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 889 start_va = 0x7ffc24340000 end_va = 0x7ffc2434ffff monitored = 0 entry_point = 0x7ffc24341700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 890 start_va = 0x7ffc24350000 end_va = 0x7ffc24358fff monitored = 0 entry_point = 0x7ffc24351ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 891 start_va = 0x7ffc24360000 end_va = 0x7ffc2438cfff monitored = 0 entry_point = 0x7ffc24362290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 892 start_va = 0x7ffc24390000 end_va = 0x7ffc243e1fff monitored = 0 entry_point = 0x7ffc243938e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 893 start_va = 0x7ffc24470000 end_va = 0x7ffc2448efff monitored = 0 entry_point = 0x7ffc24474960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 894 start_va = 0x7ffc24490000 end_va = 0x7ffc244a4fff monitored = 0 entry_point = 0x7ffc24493460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 895 start_va = 0x7ffc24580000 end_va = 0x7ffc24619fff monitored = 0 entry_point = 0x7ffc2459ada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 896 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 897 start_va = 0x7ffc246b0000 end_va = 0x7ffc246eefff monitored = 0 entry_point = 0x7ffc246d82d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 898 start_va = 0x7ffc246f0000 end_va = 0x7ffc247affff monitored = 0 entry_point = 0x7ffc2471fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 899 start_va = 0x7ffc247b0000 end_va = 0x7ffc247bafff monitored = 0 entry_point = 0x7ffc247b1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 900 start_va = 0x7ffc24880000 end_va = 0x7ffc2488afff monitored = 0 entry_point = 0x7ffc24881de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 901 start_va = 0x7ffc24950000 end_va = 0x7ffc24963fff monitored = 0 entry_point = 0x7ffc24952d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 902 start_va = 0x7ffc24a50000 end_va = 0x7ffc24ab6fff monitored = 0 entry_point = 0x7ffc24a5b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 903 start_va = 0x7ffc24ac0000 end_va = 0x7ffc24ad3fff monitored = 0 entry_point = 0x7ffc24ac2a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 904 start_va = 0x7ffc24b10000 end_va = 0x7ffc24b2cfff monitored = 0 entry_point = 0x7ffc24b14f60 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 905 start_va = 0x7ffc24b30000 end_va = 0x7ffc24b37fff monitored = 0 entry_point = 0x7ffc24b313b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 906 start_va = 0x7ffc24b40000 end_va = 0x7ffc24b9cfff monitored = 0 entry_point = 0x7ffc24b6e510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 907 start_va = 0x7ffc24c50000 end_va = 0x7ffc24ce2fff monitored = 0 entry_point = 0x7ffc24c59680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 908 start_va = 0x7ffc24e90000 end_va = 0x7ffc24ed0fff monitored = 0 entry_point = 0x7ffc24e94840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 909 start_va = 0x7ffc24ee0000 end_va = 0x7ffc24ef8fff monitored = 0 entry_point = 0x7ffc24ee4520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 910 start_va = 0x7ffc25410000 end_va = 0x7ffc25429fff monitored = 0 entry_point = 0x7ffc25412430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 911 start_va = 0x7ffc25430000 end_va = 0x7ffc25445fff monitored = 0 entry_point = 0x7ffc254319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 912 start_va = 0x7ffc25490000 end_va = 0x7ffc254c7fff monitored = 0 entry_point = 0x7ffc254a8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 913 start_va = 0x7ffc25570000 end_va = 0x7ffc2559dfff monitored = 0 entry_point = 0x7ffc25577550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 914 start_va = 0x7ffc25760000 end_va = 0x7ffc25ae1fff monitored = 0 entry_point = 0x7ffc257b1220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 915 start_va = 0x7ffc26be0000 end_va = 0x7ffc26cedfff monitored = 0 entry_point = 0x7ffc26c2eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 916 start_va = 0x7ffc27000000 end_va = 0x7ffc27135fff monitored = 0 entry_point = 0x7ffc2702f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 917 start_va = 0x7ffc27140000 end_va = 0x7ffc27225fff monitored = 0 entry_point = 0x7ffc2715cf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 918 start_va = 0x7ffc27230000 end_va = 0x7ffc2723cfff monitored = 0 entry_point = 0x7ffc27232ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 919 start_va = 0x7ffc27240000 end_va = 0x7ffc2726efff monitored = 0 entry_point = 0x7ffc27248910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 920 start_va = 0x7ffc27270000 end_va = 0x7ffc27285fff monitored = 0 entry_point = 0x7ffc27271b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 921 start_va = 0x7ffc273a0000 end_va = 0x7ffc2740dfff monitored = 0 entry_point = 0x7ffc273a7f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 922 start_va = 0x7ffc27410000 end_va = 0x7ffc27420fff monitored = 0 entry_point = 0x7ffc27413320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 923 start_va = 0x7ffc27430000 end_va = 0x7ffc27470fff monitored = 0 entry_point = 0x7ffc27447eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 924 start_va = 0x7ffc27480000 end_va = 0x7ffc2757bfff monitored = 0 entry_point = 0x7ffc274b6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 925 start_va = 0x7ffc27580000 end_va = 0x7ffc2758ffff monitored = 0 entry_point = 0x7ffc27582c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 926 start_va = 0x7ffc27590000 end_va = 0x7ffc2763dfff monitored = 0 entry_point = 0x7ffc275a80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 927 start_va = 0x7ffc27640000 end_va = 0x7ffc27651fff monitored = 0 entry_point = 0x7ffc27649260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 928 start_va = 0x7ffc27660000 end_va = 0x7ffc27710fff monitored = 0 entry_point = 0x7ffc276d88b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 929 start_va = 0x7ffc27720000 end_va = 0x7ffc27744fff monitored = 0 entry_point = 0x7ffc27732f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 930 start_va = 0x7ffc27750000 end_va = 0x7ffc27760fff monitored = 0 entry_point = 0x7ffc27757ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 931 start_va = 0x7ffc27770000 end_va = 0x7ffc27789fff monitored = 0 entry_point = 0x7ffc27772cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 932 start_va = 0x7ffc27790000 end_va = 0x7ffc2779bfff monitored = 0 entry_point = 0x7ffc277914d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 933 start_va = 0x7ffc277a0000 end_va = 0x7ffc277f4fff monitored = 0 entry_point = 0x7ffc277a3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 934 start_va = 0x7ffc27800000 end_va = 0x7ffc27836fff monitored = 0 entry_point = 0x7ffc27806020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 935 start_va = 0x7ffc27840000 end_va = 0x7ffc2785ffff monitored = 0 entry_point = 0x7ffc278439a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 936 start_va = 0x7ffc27860000 end_va = 0x7ffc2791efff monitored = 0 entry_point = 0x7ffc27881c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 937 start_va = 0x7ffc27bc0000 end_va = 0x7ffc27c87fff monitored = 0 entry_point = 0x7ffc27c013f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 938 start_va = 0x7ffc27c90000 end_va = 0x7ffc27cf0fff monitored = 0 entry_point = 0x7ffc27c94b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 939 start_va = 0x7ffc27d00000 end_va = 0x7ffc27e7bfff monitored = 0 entry_point = 0x7ffc27d51650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 940 start_va = 0x7ffc27e80000 end_va = 0x7ffc27e8afff monitored = 0 entry_point = 0x7ffc27e81770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 941 start_va = 0x7ffc27e90000 end_va = 0x7ffc27ecdfff monitored = 0 entry_point = 0x7ffc27e9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 942 start_va = 0x7ffc27ed0000 end_va = 0x7ffc27ef6fff monitored = 0 entry_point = 0x7ffc27ed3bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 943 start_va = 0x7ffc27f00000 end_va = 0x7ffc27f16fff monitored = 0 entry_point = 0x7ffc27f05630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 944 start_va = 0x7ffc27f20000 end_va = 0x7ffc27f74fff monitored = 0 entry_point = 0x7ffc27f2fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 945 start_va = 0x7ffc27f80000 end_va = 0x7ffc27f92fff monitored = 0 entry_point = 0x7ffc27f857f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 946 start_va = 0x7ffc27ff0000 end_va = 0x7ffc28069fff monitored = 0 entry_point = 0x7ffc28017630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 947 start_va = 0x7ffc280b0000 end_va = 0x7ffc28141fff monitored = 0 entry_point = 0x7ffc280fa780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 948 start_va = 0x7ffc281d0000 end_va = 0x7ffc281d9fff monitored = 0 entry_point = 0x7ffc281d1660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 949 start_va = 0x7ffc281e0000 end_va = 0x7ffc281f7fff monitored = 0 entry_point = 0x7ffc281e5910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 950 start_va = 0x7ffc28200000 end_va = 0x7ffc2834cfff monitored = 0 entry_point = 0x7ffc28243da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 951 start_va = 0x7ffc28350000 end_va = 0x7ffc2836dfff monitored = 0 entry_point = 0x7ffc28353a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 952 start_va = 0x7ffc28460000 end_va = 0x7ffc2846bfff monitored = 0 entry_point = 0x7ffc28462830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 953 start_va = 0x7ffc28470000 end_va = 0x7ffc284d3fff monitored = 0 entry_point = 0x7ffc28485ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 954 start_va = 0x7ffc286a0000 end_va = 0x7ffc286c8fff monitored = 0 entry_point = 0x7ffc286aca00 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 955 start_va = 0x7ffc286d0000 end_va = 0x7ffc28705fff monitored = 0 entry_point = 0x7ffc286e0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 956 start_va = 0x7ffc291c0000 end_va = 0x7ffc291c7fff monitored = 0 entry_point = 0x7ffc291c13e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 957 start_va = 0x7ffc29a60000 end_va = 0x7ffc29ad8fff monitored = 0 entry_point = 0x7ffc29a7fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 958 start_va = 0x7ffc29c90000 end_va = 0x7ffc2a122fff monitored = 0 entry_point = 0x7ffc29c9f760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 959 start_va = 0x7ffc2a130000 end_va = 0x7ffc2a196fff monitored = 0 entry_point = 0x7ffc2a14e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 960 start_va = 0x7ffc2a1f0000 end_va = 0x7ffc2a375fff monitored = 0 entry_point = 0x7ffc2a23d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 961 start_va = 0x7ffc2a380000 end_va = 0x7ffc2a39bfff monitored = 0 entry_point = 0x7ffc2a3837a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 962 start_va = 0x7ffc2a3e0000 end_va = 0x7ffc2a3f2fff monitored = 0 entry_point = 0x7ffc2a3e2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 963 start_va = 0x7ffc2a550000 end_va = 0x7ffc2a58ffff monitored = 0 entry_point = 0x7ffc2a561960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 964 start_va = 0x7ffc2a620000 end_va = 0x7ffc2a6b5fff monitored = 0 entry_point = 0x7ffc2a645570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 965 start_va = 0x7ffc2a6e0000 end_va = 0x7ffc2a706fff monitored = 0 entry_point = 0x7ffc2a6e7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 966 start_va = 0x7ffc2a710000 end_va = 0x7ffc2a7b9fff monitored = 0 entry_point = 0x7ffc2a737910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 967 start_va = 0x7ffc2a7c0000 end_va = 0x7ffc2a8bffff monitored = 0 entry_point = 0x7ffc2a800f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 968 start_va = 0x7ffc2a950000 end_va = 0x7ffc2a95bfff monitored = 0 entry_point = 0x7ffc2a952480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 969 start_va = 0x7ffc2ab20000 end_va = 0x7ffc2ab51fff monitored = 0 entry_point = 0x7ffc2ab32340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 970 start_va = 0x7ffc2ac90000 end_va = 0x7ffc2ac9bfff monitored = 0 entry_point = 0x7ffc2ac92790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 971 start_va = 0x7ffc2aca0000 end_va = 0x7ffc2acc3fff monitored = 0 entry_point = 0x7ffc2aca3260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 972 start_va = 0x7ffc2ae40000 end_va = 0x7ffc2af33fff monitored = 0 entry_point = 0x7ffc2ae4a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 973 start_va = 0x7ffc2af90000 end_va = 0x7ffc2afd8fff monitored = 0 entry_point = 0x7ffc2af9a090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 974 start_va = 0x7ffc2b0b0000 end_va = 0x7ffc2b0bbfff monitored = 0 entry_point = 0x7ffc2b0b27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 975 start_va = 0x7ffc2b190000 end_va = 0x7ffc2b1c0fff monitored = 0 entry_point = 0x7ffc2b197d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 976 start_va = 0x7ffc2b1f0000 end_va = 0x7ffc2b269fff monitored = 0 entry_point = 0x7ffc2b211a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 977 start_va = 0x7ffc2b2b0000 end_va = 0x7ffc2b2e3fff monitored = 0 entry_point = 0x7ffc2b2cae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 978 start_va = 0x7ffc2b2f0000 end_va = 0x7ffc2b2f9fff monitored = 0 entry_point = 0x7ffc2b2f1830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 979 start_va = 0x7ffc2b400000 end_va = 0x7ffc2b41efff monitored = 0 entry_point = 0x7ffc2b405d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 980 start_va = 0x7ffc2b570000 end_va = 0x7ffc2b5cbfff monitored = 0 entry_point = 0x7ffc2b586f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 981 start_va = 0x7ffc2b620000 end_va = 0x7ffc2b636fff monitored = 0 entry_point = 0x7ffc2b6279d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 982 start_va = 0x7ffc2b740000 end_va = 0x7ffc2b74afff monitored = 0 entry_point = 0x7ffc2b7419a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 983 start_va = 0x7ffc2b780000 end_va = 0x7ffc2b7a0fff monitored = 0 entry_point = 0x7ffc2b790250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 984 start_va = 0x7ffc2b7d0000 end_va = 0x7ffc2b809fff monitored = 0 entry_point = 0x7ffc2b7d8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 985 start_va = 0x7ffc2b810000 end_va = 0x7ffc2b836fff monitored = 0 entry_point = 0x7ffc2b820aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 986 start_va = 0x7ffc2b920000 end_va = 0x7ffc2b94cfff monitored = 0 entry_point = 0x7ffc2b939d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 987 start_va = 0x7ffc2bab0000 end_va = 0x7ffc2bb05fff monitored = 0 entry_point = 0x7ffc2bac0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 988 start_va = 0x7ffc2bb10000 end_va = 0x7ffc2bb28fff monitored = 0 entry_point = 0x7ffc2bb15e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 989 start_va = 0x7ffc2bb30000 end_va = 0x7ffc2bb58fff monitored = 0 entry_point = 0x7ffc2bb44530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 990 start_va = 0x7ffc2bb60000 end_va = 0x7ffc2bbf8fff monitored = 0 entry_point = 0x7ffc2bb8f4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 991 start_va = 0x7ffc2bca0000 end_va = 0x7ffc2bcb3fff monitored = 0 entry_point = 0x7ffc2bca52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 992 start_va = 0x7ffc2bcc0000 end_va = 0x7ffc2bd0afff monitored = 0 entry_point = 0x7ffc2bcc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 993 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 994 start_va = 0x7ffc2bd20000 end_va = 0x7ffc2bd2ffff monitored = 0 entry_point = 0x7ffc2bd256e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 995 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 996 start_va = 0x7ffc2be50000 end_va = 0x7ffc2c016fff monitored = 0 entry_point = 0x7ffc2beadb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 997 start_va = 0x7ffc2c020000 end_va = 0x7ffc2c0a5fff monitored = 0 entry_point = 0x7ffc2c02d8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 998 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 999 start_va = 0x7ffc2c2a0000 end_va = 0x7ffc2c354fff monitored = 0 entry_point = 0x7ffc2c2e22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 1000 start_va = 0x7ffc2c360000 end_va = 0x7ffc2c376fff monitored = 0 entry_point = 0x7ffc2c361390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1001 start_va = 0x7ffc2c380000 end_va = 0x7ffc2c3c2fff monitored = 0 entry_point = 0x7ffc2c394b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1002 start_va = 0x7ffc2c3d0000 end_va = 0x7ffc2c424fff monitored = 0 entry_point = 0x7ffc2c3e7970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 1003 start_va = 0x7ffc2c430000 end_va = 0x7ffc2ca73fff monitored = 0 entry_point = 0x7ffc2c5f64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 1004 start_va = 0x7ffc2caa0000 end_va = 0x7ffc2cec8fff monitored = 0 entry_point = 0x7ffc2cac8740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 1005 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1006 start_va = 0x7ffc2d0a0000 end_va = 0x7ffc2d0f1fff monitored = 0 entry_point = 0x7ffc2d0af530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1007 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1008 start_va = 0x7ffc2d1c0000 end_va = 0x7ffc2d1c7fff monitored = 0 entry_point = 0x7ffc2d1c1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1009 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1010 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1011 start_va = 0x7ffc2d5b0000 end_va = 0x7ffc2d656fff monitored = 0 entry_point = 0x7ffc2d5c58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1012 start_va = 0x7ffc2d6d0000 end_va = 0x7ffc2d73afff monitored = 0 entry_point = 0x7ffc2d6e90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1013 start_va = 0x7ffc2d740000 end_va = 0x7ffc2d882fff monitored = 0 entry_point = 0x7ffc2d768210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1014 start_va = 0x7ffc2d9f0000 end_va = 0x7ffc2da96fff monitored = 0 entry_point = 0x7ffc2d9fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1015 start_va = 0x7ffc2daa0000 end_va = 0x7ffc2effefff monitored = 0 entry_point = 0x7ffc2dc011f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 1016 start_va = 0x7ffc2f1b0000 end_va = 0x7ffc2f20bfff monitored = 0 entry_point = 0x7ffc2f1cb720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 1017 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1018 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1019 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1020 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1021 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1050 start_va = 0x5300000 end_va = 0x5300fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005300000" filename = "" Region: id = 1074 start_va = 0x5200000 end_va = 0x5200fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005200000" filename = "" Region: id = 1237 start_va = 0x7910000 end_va = 0x7a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007910000" filename = "" Region: id = 1239 start_va = 0x7a10000 end_va = 0x7b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a10000" filename = "" Region: id = 1240 start_va = 0x7d10000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d10000" filename = "" Region: id = 1241 start_va = 0x7e10000 end_va = 0x7f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 1487 start_va = 0x5200000 end_va = 0x5207fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005200000" filename = "" Region: id = 1500 start_va = 0x5200000 end_va = 0x5205fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005200000" filename = "" Region: id = 1507 start_va = 0x7f10000 end_va = 0x800ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f10000" filename = "" Region: id = 1509 start_va = 0x7ffc24bf0000 end_va = 0x7ffc24c15fff monitored = 0 entry_point = 0x7ffc24c052a0 region_type = mapped_file name = "browser.dll" filename = "\\Windows\\System32\\browser.dll" (normalized: "c:\\windows\\system32\\browser.dll") Region: id = 1513 start_va = 0x5200000 end_va = 0x520ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005200000" filename = "" Region: id = 2003 start_va = 0x1c40000 end_va = 0x1c45fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c40000" filename = "" Region: id = 2008 start_va = 0x1c40000 end_va = 0x1c41fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c40000" filename = "" Region: id = 2014 start_va = 0x1c40000 end_va = 0x1c4afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c40000" filename = "" Region: id = 2015 start_va = 0x8010000 end_va = 0x810ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008010000" filename = "" Region: id = 2017 start_va = 0x8110000 end_va = 0x820ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008110000" filename = "" Region: id = 2018 start_va = 0x8210000 end_va = 0x830ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008210000" filename = "" Region: id = 2019 start_va = 0x8310000 end_va = 0x840ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008310000" filename = "" Region: id = 2022 start_va = 0x1c50000 end_va = 0x1c50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c50000" filename = "" Region: id = 2050 start_va = 0x1c50000 end_va = 0x1c51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c50000" filename = "" Region: id = 2051 start_va = 0x1c60000 end_va = 0x1c61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c60000" filename = "" Region: id = 2052 start_va = 0x1c70000 end_va = 0x1c72fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c70000" filename = "" Region: id = 2055 start_va = 0x1c70000 end_va = 0x1c77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c70000" filename = "" Region: id = 2056 start_va = 0x1c80000 end_va = 0x1c81fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c80000" filename = "" Region: id = 2057 start_va = 0x1c70000 end_va = 0x1c71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c70000" filename = "" Region: id = 2058 start_va = 0x1c60000 end_va = 0x1c66fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c60000" filename = "" Region: id = 2059 start_va = 0x1c60000 end_va = 0x1c65fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c60000" filename = "" Region: id = 2063 start_va = 0x8410000 end_va = 0x850ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008410000" filename = "" Region: id = 2066 start_va = 0x1c60000 end_va = 0x1c62fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c60000" filename = "" Region: id = 2067 start_va = 0x1c90000 end_va = 0x1c93fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001c90000" filename = "" Region: id = 2080 start_va = 0x8510000 end_va = 0x860ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008510000" filename = "" Region: id = 2083 start_va = 0x8610000 end_va = 0x870ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 2086 start_va = 0x120000 end_va = 0x123fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2087 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2088 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2092 start_va = 0x120000 end_va = 0x122fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2098 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2099 start_va = 0x110000 end_va = 0x116fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2107 start_va = 0x110000 end_va = 0x118fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2109 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2114 start_va = 0x7ffc21330000 end_va = 0x7ffc21355fff monitored = 0 entry_point = 0x7ffc21331cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2115 start_va = 0x3090000 end_va = 0x310ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003090000" filename = "" Region: id = 2128 start_va = 0x110000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2135 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2158 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2430 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2431 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2434 start_va = 0x3d00000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d00000" filename = "" Region: id = 2435 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2436 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2437 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2438 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2442 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2444 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2445 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2446 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2450 start_va = 0x3f80000 end_va = 0x407ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 2454 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2455 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2456 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2459 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2460 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2461 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2462 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2463 start_va = 0x110000 end_va = 0x118fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2464 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2465 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2469 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2470 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 2471 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2472 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 2473 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2474 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2475 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2477 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2478 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2481 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2482 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2483 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2484 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2485 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2488 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2489 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2490 start_va = 0x110000 end_va = 0x115fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2494 start_va = 0x110000 end_va = 0x112fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2495 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 2496 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 2497 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2500 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2501 start_va = 0x130000 end_va = 0x131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2502 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2505 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2506 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2509 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2510 start_va = 0x130000 end_va = 0x131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2511 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2512 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2513 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2514 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2517 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2518 start_va = 0x130000 end_va = 0x131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2519 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2520 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2523 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2524 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2525 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2526 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2529 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2530 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2531 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2532 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2535 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2538 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2539 start_va = 0x160000 end_va = 0x161fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 2540 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2543 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2546 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2547 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2548 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2552 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2555 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2558 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2559 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2560 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2563 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2564 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2565 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2568 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2569 start_va = 0x110000 end_va = 0x117fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2570 start_va = 0x110000 end_va = 0x118fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2573 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2574 start_va = 0x110000 end_va = 0x119fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2577 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2578 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2581 start_va = 0x110000 end_va = 0x11afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2582 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2583 start_va = 0x110000 end_va = 0x111fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 2584 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2587 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2590 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2591 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2592 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2593 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2596 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2599 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2600 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2601 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2604 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2605 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2606 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2609 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2610 start_va = 0x130000 end_va = 0x131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 2611 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2612 start_va = 0x120000 end_va = 0x127fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2613 start_va = 0x120000 end_va = 0x128fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2614 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2615 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2618 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2619 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2622 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2623 start_va = 0x120000 end_va = 0x129fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2624 start_va = 0x120000 end_va = 0x121fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2627 start_va = 0x120000 end_va = 0x12afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 2628 start_va = 0x130000 end_va = 0x131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Thread: id = 13 os_tid = 0xe9c Thread: id = 14 os_tid = 0x98c Thread: id = 15 os_tid = 0x908 Thread: id = 16 os_tid = 0xb8c Thread: id = 17 os_tid = 0xbfc Thread: id = 18 os_tid = 0x784 Thread: id = 19 os_tid = 0x7a4 Thread: id = 20 os_tid = 0xce4 Thread: id = 21 os_tid = 0x8 Thread: id = 22 os_tid = 0x8e8 Thread: id = 23 os_tid = 0xaa4 Thread: id = 24 os_tid = 0xde8 Thread: id = 25 os_tid = 0x378 Thread: id = 26 os_tid = 0x220 Thread: id = 27 os_tid = 0x22c Thread: id = 28 os_tid = 0x248 Thread: id = 29 os_tid = 0x410 Thread: id = 30 os_tid = 0x2e8 Thread: id = 31 os_tid = 0xddc Thread: id = 32 os_tid = 0x458 Thread: id = 33 os_tid = 0x1c4 Thread: id = 34 os_tid = 0x47c Thread: id = 35 os_tid = 0xec0 Thread: id = 36 os_tid = 0x88c Thread: id = 37 os_tid = 0xc4c Thread: id = 38 os_tid = 0xc30 Thread: id = 39 os_tid = 0xc0c Thread: id = 40 os_tid = 0xac8 Thread: id = 41 os_tid = 0xfec Thread: id = 42 os_tid = 0xfe4 Thread: id = 43 os_tid = 0xfe0 Thread: id = 44 os_tid = 0xfdc Thread: id = 45 os_tid = 0xfd8 Thread: id = 46 os_tid = 0xfc8 Thread: id = 47 os_tid = 0xf98 Thread: id = 48 os_tid = 0xf8c Thread: id = 49 os_tid = 0xf74 Thread: id = 50 os_tid = 0xf54 Thread: id = 51 os_tid = 0xf50 Thread: id = 52 os_tid = 0xf48 Thread: id = 53 os_tid = 0xf04 Thread: id = 54 os_tid = 0xed0 Thread: id = 55 os_tid = 0xe40 Thread: id = 56 os_tid = 0xe3c Thread: id = 57 os_tid = 0xe08 Thread: id = 58 os_tid = 0x454 Thread: id = 59 os_tid = 0x9e8 Thread: id = 60 os_tid = 0x998 Thread: id = 61 os_tid = 0x970 [0123.936] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x7ffc1e429330, phModule=0x64ffa98 | out: phModule=0x64ffa98*=0x7ffc1e420000) returned 1 [0124.207] TpCallbackUnloadDllOnCompletion () returned 0x7ffc1e41ffff [0124.207] PublishDebugMessage () returned 0x1 [0124.207] GetCurrentThreadId () returned 0x970 [0124.208] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0124.208] GetCurrentThreadId () returned 0x970 [0124.208] GetProcessHeap () returned 0x190000 [0124.208] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x28) returned 0x50d0f80 [0124.208] PublishDebugMessage () returned 0x1 [0124.208] CoCreateInstance (in: rclsid=0x7ffc1e442698*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffc1e4426a8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x64ff780 | out: ppv=0x64ff780*=0x5df6710) returned 0x0 [0125.275] WbemLocator:IUnknown:AddRef (This=0x5df6710) returned 0x2 [0125.275] WbemLocator:IUnknown:AddRef (This=0x5df6710) returned 0x3 [0125.275] WbemLocator:IUnknown:Release (This=0x5df6710) returned 0x2 [0125.276] GetProcessHeap () returned 0x190000 [0125.767] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x5092500 [0125.767] LocaleNameToLCID (lpName="en-US", dwFlags=0x0) returned 0x409 [0125.767] _vsnwprintf (in: _Buffer=0x64ff8b8, _BufferCount=0x9, _Format="MS_%x", _ArgList=0x64ff798 | out: _Buffer="MS_409") returned 6 [0125.768] SetThreadToken (Thread=0x0, Token=0xb04) returned 1 [0125.768] GetCurrentThreadId () returned 0x970 [0125.768] WbemLocator:IWbemLocator:ConnectServer (in: This=0x5df6710, strNetworkResource="ROOT/Microsoft/Windows/Smb", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority=0x0, pCtx=0x0, ppNamespace=0x64ff808 | out: ppNamespace=0x64ff808*=0x5064580) returned 0x0 [0180.082] CoSetProxyBlanket (pProxy=0x5064580, dwAuthnSvc=0xffffffff, dwAuthzSvc=0xffffffff, pServerPrincName=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x40) returned 0x80004002 [0180.082] GetProcessHeap () returned 0x190000 [0180.082] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x8c090c0 [0180.082] GetProcessHeap () returned 0x190000 [0180.082] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x30) returned 0x50d2f10 [0180.082] WbemLocator:IUnknown:AddRef (This=0x5064580) returned 0x2 [0180.083] GetProcessHeap () returned 0x190000 [0180.083] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x5092500) returned 1 [0180.083] PublishDebugMessage () returned 0x1 [0180.083] WbemLocator:IUnknown:Release (This=0x5df6710) returned 0x1 [0180.083] CoCreateInstance (in: rclsid=0x7ffc1e4426e8*(Data1=0x674b6698, Data2=0xee92, Data3=0x11d0, Data4=([0]=0xad, [1]=0x71, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd8, [6]=0xfd, [7]=0xff)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffc1e4426d8*(Data1=0x44aca674, Data2=0xe8fc, Data3=0x11d0, Data4=([0]=0xa0, [1]=0x7c, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x5098188 | out: ppv=0x5098188*=0x4469b80) returned 0x0 [0180.083] OperationOptions_CopyOptions () returned 0x0 [0180.087] ResolveDelayLoadedAPI () returned 0x7ffc2f4ccbc0 [0180.100] WbemContext:IWbemContext:SetValue (This=0x4469b80, wszName="__MI_OPERATIONOPTIONS_CLIENTIDENTITY", lFlags=0, pValue=0x64ff938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="WMIDCOM", varVal2=0x0)) returned 0x0 [0180.102] OptionsValueToContextValue () returned 0x0 [0180.102] OptionsValueToContextValue () returned 0x0 [0180.102] WbemContext:IWbemContext:SetValue (This=0x4469b80, wszName="__MI_CallbackRegistration", lFlags=0, pValue=0x64ff948*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0 [0180.102] SetCorrelationIdToWbemContext () returned 0x0 [0180.102] PublishDebugMessage () returned 0x1 [0180.102] CContextSwitcher::ContextCallback () returned 0x0 [0180.102] GetProcessHeap () returned 0x190000 [0180.102] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0xa8) returned 0x297e760 [0180.102] CGIPTable::RegisterInterfaceInGlobal () returned 0x0 [0180.103] CGIPTable::GetInterfaceFromGlobal () returned 0x0 [0180.104] PublishDebugMessage () returned 0x1 [0180.105] CreateConversionContext () returned 0x0 [0180.105] GetProcessHeap () returned 0x190000 [0180.105] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x18) returned 0x505e040 [0180.105] GetMethodParameters () returned 0x0 [0180.105] GetCurrentThreadId () returned 0x970 [0180.105] PublishDebugMessage () returned 0x1 [0180.105] WbemLocator:IUnknown:AddRef (This=0x5df6710) returned 0x2 [0180.105] GetProcessHeap () returned 0x190000 [0180.105] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x8c093c0 [0180.105] _wcsicmp (_String1="ROOT/Microsoft/Windows/Smb", _String2="ROOT/Microsoft/Windows/Smb") returned 0 [0180.105] _wcsicmp (_String1="ROOT/Microsoft/Windows/Smb", _String2="ROOT/Microsoft/Windows/Smb") returned 0 [0180.105] WbemLocator:IUnknown:AddRef (This=0x5064580) returned 0x3 [0180.105] GetProcessHeap () returned 0x190000 [0180.105] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x8c093c0) returned 1 [0180.106] PublishDebugMessage () returned 0x1 [0180.106] WbemLocator:IUnknown:Release (This=0x5df6710) returned 0x1 [0180.144] GetProcessHeap () returned 0x190000 [0180.144] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x505e040) returned 1 [0180.144] ParametersToWMIObject () returned 0x0 [0180.145] SetModifiedPropertyNamesToContext () returned 0x0 [0180.145] GetCurrentProcessId () returned 0x3e4 [0180.145] PublishClientOperationInfo () returned 0x0 [0180.145] PublishDebugMessage () returned 0x1 [0180.145] GetProcessHeap () returned 0x190000 [0180.145] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x18) returned 0x505ec40 [0180.146] IWbemServices:ExecMethodAsync (This=0x5064580, strObjectPath="MSFT_SmbShare", strMethodName="FireShareChangeEvent", lFlags=0, pCtx=0x4469b80, pInParams=0x8c0ae50, pResponseHandler=0x67c0940) returned 0x0 [0180.147] GetProcessHeap () returned 0x190000 [0180.147] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x505ec40) returned 1 [0180.147] PublishDebugMessage () returned 0x1 [0180.147] IUnknown:Release (This=0x8c0ae50) returned 0x1 [0180.147] IUnknown:Release (This=0x67c0940) returned 0x3 [0180.147] IUnknown:Release (This=0x67c0940) returned 0x2 [0180.147] CoUninitialize () [0180.147] GetCurrentThreadId () returned 0x970 [0180.148] GetProcessHeap () returned 0x190000 [0180.148] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50d0f80) returned 1 [0180.148] SetThreadToken (Thread=0x0, Token=0x0) returned 1 [0180.148] PublishDebugMessage () returned 0x1 [0186.792] PublishDebugMessage () returned 0x1 [0186.793] GetCurrentThreadId () returned 0x970 [0186.793] GetProcessHeap () returned 0x190000 [0186.793] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x28) returned 0x50d36e0 [0186.793] WMIExtendedObjectToInstance () returned 0x0 [0186.794] _wcsicmp (_String1="MSFT_WmiError", _String2="CIM_Error") returned 10 [0186.794] _wcsicmp (_String1="MSFT_WmiError", _String2="__Parameters") returned 14 [0186.795] _wcsicmp (_String1="MSFT_WmiError", _String2=0x7ffc1e440ff0) returned 14 [0186.795] ?GetMiClass@DynamicSchema@@UEAAJPEBG00PEAPEBU_MI_Class@@@Z () returned 0x80041002 [0186.795] ClassCache_GetClass () returned 0x6 [0186.795] ResultToHRESULT () returned 0x80041002 [0186.795] GetCurrentThreadId () returned 0x970 [0186.795] PublishDebugMessage () returned 0x1 [0186.795] WbemLocator:IUnknown:AddRef (This=0x5df6710) returned 0x2 [0186.795] GetProcessHeap () returned 0x190000 [0186.795] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x50900a0 [0186.795] LocaleNameToLCID (lpName="en-US", dwFlags=0x0) returned 0x409 [0186.796] _vsnwprintf (in: _Buffer=0x64fc178, _BufferCount=0x9, _Format="MS_%x", _ArgList=0x64fc058 | out: _Buffer="MS_409") returned 6 [0186.796] SetThreadToken (Thread=0x0, Token=0xb04) returned 1 [0186.796] GetCurrentThreadId () returned 0x970 [0186.796] WbemLocator:IWbemLocator:ConnectServer (in: This=0x5df6710, strNetworkResource="ROOT/Microsoft/Windows/Smb", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority=0x0, pCtx=0x0, ppNamespace=0x64fc0c8 | out: ppNamespace=0x64fc0c8*=0x385ad40) returned 0x0 [0187.274] CoSetProxyBlanket (pProxy=0x385ad40, dwAuthnSvc=0xffffffff, dwAuthzSvc=0xffffffff, pServerPrincName=0x0, dwAuthnLevel=0x0, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x40) returned 0x80004002 [0187.274] GetProcessHeap () returned 0x190000 [0187.274] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x67340c0 [0187.275] GetProcessHeap () returned 0x190000 [0187.275] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x30) returned 0x50d1200 [0187.275] WbemLocator:IUnknown:AddRef (This=0x385ad40) returned 0x2 [0187.275] GetProcessHeap () returned 0x190000 [0187.275] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50900a0) returned 1 [0187.275] PublishDebugMessage () returned 0x1 [0187.275] WbemLocator:IUnknown:Release (This=0x5df6710) returned 0x1 [0187.275] GetProcessHeap () returned 0x190000 [0187.275] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x18) returned 0x4482640 [0187.275] IWbemServices:GetObject (in: This=0x385ad40, strObjectPath="MSFT_WmiError", lFlags=0, pCtx=0x4469b80, ppObject=0x64fc218*=0x0, ppCallResult=0x0 | out: ppObject=0x64fc218*=0x8c0e9d0, ppCallResult=0x0) returned 0x0 [0187.306] GetProcessHeap () returned 0x190000 [0187.306] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x4482640) returned 1 [0187.306] IWbemClassObject:Get (in: This=0x8c0e9d0, wszName="__CLASS", lFlags=0, pVal=0x64fc190*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc190*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="MSFT_WmiError", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.307] IWbemClassObject:Get (in: This=0x8c0e9d0, wszName="__NAMESPACE", lFlags=0, pVal=0x64fc160*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc160*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\Microsoft\\Windows\\Smb", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.307] IWbemClassObject:Get (in: This=0x8c0e9d0, wszName="__SUPERCLASS", lFlags=0, pVal=0x64fc178*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc178*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_Error", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.307] ?GetMiClass@DynamicSchema@@UEAAJPEBG00PEAPEBU_MI_Class@@@Z () returned 0x80041002 [0187.307] ClassCache_GetClass () returned 0x6 [0187.307] ResultToHRESULT () returned 0x80041002 [0187.307] GetCurrentThreadId () returned 0x970 [0187.307] PublishDebugMessage () returned 0x1 [0187.307] WbemLocator:IUnknown:AddRef (This=0x5df6710) returned 0x2 [0187.307] GetProcessHeap () returned 0x190000 [0187.307] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x67396a0 [0187.307] _wcsicmp (_String1="ROOT/Microsoft/Windows/Smb", _String2="ROOT/Microsoft/Windows/Smb") returned 0 [0187.307] _wcsicmp (_String1="ROOT/Microsoft/Windows/Smb", _String2="ROOT/Microsoft/Windows/Smb") returned 0 [0187.308] WbemLocator:IUnknown:AddRef (This=0x385ad40) returned 0x3 [0187.308] GetProcessHeap () returned 0x190000 [0187.308] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x67396a0) returned 1 [0187.308] PublishDebugMessage () returned 0x1 [0187.308] WbemLocator:IUnknown:Release (This=0x5df6710) returned 0x1 [0187.308] GetProcessHeap () returned 0x190000 [0187.308] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x18) returned 0x44822c0 [0187.308] IWbemServices:GetObject (in: This=0x385ad40, strObjectPath="CIM_Error", lFlags=0, pCtx=0x4469b80, ppObject=0x64fc0b8*=0x0, ppCallResult=0x0 | out: ppObject=0x64fc0b8*=0x8c0ed50, ppCallResult=0x0) returned 0x0 [0187.326] GetProcessHeap () returned 0x190000 [0187.326] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x44822c0) returned 1 [0187.326] IWbemClassObject:Get (in: This=0x8c0ed50, wszName="__CLASS", lFlags=0, pVal=0x64fc030*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc030*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="CIM_Error", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.326] IWbemClassObject:Get (in: This=0x8c0ed50, wszName="__NAMESPACE", lFlags=0, pVal=0x64fc000*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc000*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\Microsoft\\Windows\\Smb", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.327] IWbemClassObject:Get (in: This=0x8c0ed50, wszName="__SUPERCLASS", lFlags=0, pVal=0x64fc018*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x64fc018*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0187.327] WMIObjectToClass () returned 0x0 [0187.448] ResultToHRESULT () returned 0x0 [0187.448] ClassCache_AddClass () returned 0x0 [0187.448] ResultToHRESULT () returned 0x0 [0187.449] WbemLocator:IUnknown:Release (This=0x385ad40) returned 0x2 [0187.449] IUnknown:Release (This=0x8c0ed50) returned 0x0 [0187.449] WMIObjectToClass () returned 0x0 [0187.455] ResultToHRESULT () returned 0x0 [0187.455] ClassCache_AddClass () returned 0x0 [0187.455] ResultToHRESULT () returned 0x0 [0187.455] WbemLocator:IUnknown:Release (This=0x385ad40) returned 0x1 [0187.455] IUnknown:Release (This=0x8c0e9d0) returned 0x0 [0187.456] Instance_New () returned 0x0 [0187.456] ResultToHRESULT () returned 0x0 [0187.456] ResultToHRESULT () returned 0x0 [0187.458] PublishDebugMessage () returned 0x1 [0187.458] ResultFromHRESULT () returned 0x15 [0187.458] PublishDebugMessage () returned 0x1 [0187.460] GetCurrentThreadId () returned 0x970 [0187.460] GetProcessHeap () returned 0x190000 [0187.460] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50d36e0) returned 1 [0187.460] SetThreadToken (Thread=0x0, Token=0x0) returned 1 [0187.467] GetModuleHandleExW (in: dwFlags=0x4, lpModuleName=0x7ffc1e431940, phModule=0x64ffa98 | out: phModule=0x64ffa98*=0x7ffc1e420000) returned 1 [0187.468] TpCallbackUnloadDllOnCompletion () returned 0x7ffc1e41ffff [0187.468] PublishDebugMessage () returned 0x1 [0187.468] TpWaitForWork () returned 0x0 [0187.468] GetProcessHeap () returned 0x190000 [0187.468] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x28) returned 0x50d1160 [0187.468] GetProcessHeap () returned 0x190000 [0187.468] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x40) returned 0x6734420 [0187.468] GetProcessHeap () returned 0x190000 [0187.468] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x10) returned 0x5e84bd0 [0187.468] SetEvent (hEvent=0xb00) returned 1 [0187.468] GetProcessHeap () returned 0x190000 [0187.468] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50cf7c0) returned 1 [0187.468] TpReleaseWork () returned 0x1 [0187.469] TpReleaseWork () returned 0x2 [0187.469] GetProcessHeap () returned 0x190000 [0187.469] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x5093040) returned 1 [0187.469] GetProcessHeap () returned 0x190000 [0187.469] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50a9d10) returned 1 [0187.470] GetProcessHeap () returned 0x190000 [0187.470] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x44858c0) returned 1 [0187.470] GetProcessHeap () returned 0x190000 [0187.470] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50d02b0) returned 1 [0187.470] GetProcessHeap () returned 0x190000 [0187.470] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x4486240) returned 1 [0187.470] PublishDebugMessage () returned 0x1 [0187.470] PublishDebugMessage () returned 0x1 [0187.470] GetProcessHeap () returned 0x190000 [0187.470] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x5098040) returned 1 [0187.470] PublishDebugMessage () returned 0x1 Thread: id = 62 os_tid = 0x954 Thread: id = 63 os_tid = 0x930 Thread: id = 64 os_tid = 0x920 Thread: id = 65 os_tid = 0x91c Thread: id = 66 os_tid = 0x904 Thread: id = 67 os_tid = 0x900 Thread: id = 68 os_tid = 0x590 Thread: id = 69 os_tid = 0x8cc Thread: id = 70 os_tid = 0x8c8 Thread: id = 71 os_tid = 0x8b4 Thread: id = 72 os_tid = 0x888 Thread: id = 73 os_tid = 0x874 Thread: id = 74 os_tid = 0x86c Thread: id = 75 os_tid = 0x864 Thread: id = 76 os_tid = 0x858 Thread: id = 77 os_tid = 0x83c Thread: id = 78 os_tid = 0x824 Thread: id = 79 os_tid = 0x698 [0123.773] GetProcessHeap () returned 0x190000 [0123.773] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x28) returned 0x50cf7c0 [0123.773] OperationOptions_Create () returned 0x0 [0123.776] PublishDebugMessage () returned 0x1 [0123.776] GetProcessHeap () returned 0x190000 [0123.776] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x1c) returned 0x44858c0 [0123.776] GetProcessHeap () returned 0x190000 [0123.776] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x2a) returned 0x50d02b0 [0123.779] PublishDebugMessage () returned 0x1 [0123.779] GetProcessHeap () returned 0x190000 [0123.779] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x1d8) returned 0x5098040 [0123.780] ??0DynamicSchema@@QEAA@XZ () returned 0x5098208 [0123.780] GetCorrelationId () returned 0x0 [0123.781] CreateThreadpoolWork (in: pfnwk=0x7ffc1e429330, pv=0x5098040, pcbe=0x0 | out: pv=0x5098040) returned 0x295c580 [0123.781] GetProcessHeap () returned 0x190000 [0123.781] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x36) returned 0x5093040 [0123.781] GetTickCount64 () returned 0x1f4ce1d [0123.782] GetProcessHeap () returned 0x190000 [0123.782] RtlAllocateHeap (HeapHandle=0x190000, Flags=0x0, Size=0x18) returned 0x4486240 [0123.782] PublishDebugMessage () returned 0x1 [0123.782] TpPostWork () returned 0x3 [0123.782] PublishDebugMessage () returned 0x1 [0187.459] PublishDebugMessage () returned 0x1 [0187.459] CreateThreadpoolWork (in: pfnwk=0x7ffc1e431940, pv=0x5098040, pcbe=0x0 | out: pv=0x5098040) returned 0x2906ae0 [0187.459] TpPostWork () returned 0x3 [0187.459] RtlInterlockedWakeAll () returned 0x0 [0187.460] PublishDebugMessage () returned 0x1 [0187.460] PublishDebugMessage () returned 0x1 Thread: id = 80 os_tid = 0x428 Thread: id = 81 os_tid = 0x42c Thread: id = 82 os_tid = 0x394 Thread: id = 83 os_tid = 0x660 [0187.472] WbemLocator:IUnknown:Release (This=0x5064580) returned 0x3 [0187.472] CGIPTable::RevokeInterfaceFromGlobal () returned 0x0 [0187.472] ResultFromHRESULT () returned 0x0 [0187.472] GetProcessHeap () returned 0x190000 [0187.472] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x297e760) returned 1 [0187.472] PublishDebugMessage () returned 0x1 [0187.472] WbemContext:IUnknown:Release (This=0x4469b80) returned 0x0 [0187.473] GetProcessHeap () returned 0x190000 [0187.473] RtlFreeHeap (HeapHandle=0x190000, Flags=0x0, BaseAddress=0x50d1160) returned 1 [0187.473] WaitForSingleObject (hHandle=0xb00, dwMilliseconds=0xffffffff) Thread: id = 84 os_tid = 0x5f0 Thread: id = 85 os_tid = 0x4e0 Thread: id = 86 os_tid = 0x4c4 Thread: id = 87 os_tid = 0x490 Thread: id = 88 os_tid = 0x45c Thread: id = 89 os_tid = 0x424 Thread: id = 90 os_tid = 0x404 Thread: id = 91 os_tid = 0x2fc Thread: id = 92 os_tid = 0x154 Thread: id = 93 os_tid = 0x13c Thread: id = 94 os_tid = 0x144 Thread: id = 95 os_tid = 0x2d8 Thread: id = 96 os_tid = 0x38c Thread: id = 97 os_tid = 0x164 Thread: id = 98 os_tid = 0x158 Thread: id = 99 os_tid = 0x148 Thread: id = 100 os_tid = 0x1ac Thread: id = 101 os_tid = 0x174 Thread: id = 102 os_tid = 0x3e8 Thread: id = 130 os_tid = 0x10ac Thread: id = 131 os_tid = 0x10fc Thread: id = 132 os_tid = 0x1100 Thread: id = 133 os_tid = 0x1104 Thread: id = 144 os_tid = 0x13a0 Thread: id = 173 os_tid = 0x13d4 Thread: id = 174 os_tid = 0x1140 Thread: id = 175 os_tid = 0xdec Thread: id = 176 os_tid = 0x13ac Thread: id = 182 os_tid = 0xbe8 Thread: id = 184 os_tid = 0xfb8 Thread: id = 186 os_tid = 0xe7c Thread: id = 191 os_tid = 0x318 Thread: id = 192 os_tid = 0x12f0 Thread: id = 193 os_tid = 0x13f0 Thread: id = 194 os_tid = 0x13d4 Thread: id = 195 os_tid = 0x13f4 Thread: id = 196 os_tid = 0xed8 Thread: id = 197 os_tid = 0x46c Thread: id = 199 os_tid = 0xbcc Process: id = "6" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x3682b000" os_pid = "0xd7c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x268" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xe], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cc92" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1100 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1101 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1102 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1103 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1104 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1105 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1106 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1107 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1108 start_va = 0x1c0000 end_va = 0x1c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1109 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1110 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1111 start_va = 0x1f0000 end_va = 0x1f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1112 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1113 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 1114 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 1115 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1116 start_va = 0x460000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1117 start_va = 0x5e0000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1118 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 1119 start_va = 0x6b0000 end_va = 0x9e6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1120 start_va = 0x9f0000 end_va = 0xb77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 1121 start_va = 0xb80000 end_va = 0xd00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b80000" filename = "" Region: id = 1122 start_va = 0xd10000 end_va = 0xd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 1123 start_va = 0xd90000 end_va = 0xe8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 1124 start_va = 0xe90000 end_va = 0xf0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 1125 start_va = 0xf10000 end_va = 0xf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 1126 start_va = 0xf90000 end_va = 0x100ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f90000" filename = "" Region: id = 1127 start_va = 0x1010000 end_va = 0x108ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 1128 start_va = 0x1090000 end_va = 0x110ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 1129 start_va = 0x1110000 end_va = 0x118ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001110000" filename = "" Region: id = 1130 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1131 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1132 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1133 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1134 start_va = 0x7ff76eff0000 end_va = 0x7ff76f06ffff monitored = 0 entry_point = 0x7ff76f005f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 1135 start_va = 0x7ffc117f0000 end_va = 0x7ffc1183cfff monitored = 0 entry_point = 0x7ffc117fb470 region_type = mapped_file name = "pdh.dll" filename = "\\Windows\\System32\\pdh.dll" (normalized: "c:\\windows\\system32\\pdh.dll") Region: id = 1136 start_va = 0x7ffc11840000 end_va = 0x7ffc11864fff monitored = 0 entry_point = 0x7ffc11855dc0 region_type = mapped_file name = "wmiperfclass.dll" filename = "\\Windows\\System32\\wbem\\WmiPerfClass.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiperfclass.dll") Region: id = 1137 start_va = 0x7ffc175a0000 end_va = 0x7ffc175dcfff monitored = 0 entry_point = 0x7ffc175ab760 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 1138 start_va = 0x7ffc1c1a0000 end_va = 0x7ffc1c1c4fff monitored = 0 entry_point = 0x7ffc1c1a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1139 start_va = 0x7ffc1c1d0000 end_va = 0x7ffc1c1e3fff monitored = 0 entry_point = 0x7ffc1c1d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1140 start_va = 0x7ffc1c1f0000 end_va = 0x7ffc1c2e5fff monitored = 0 entry_point = 0x7ffc1c229590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1141 start_va = 0x7ffc1c960000 end_va = 0x7ffc1c970fff monitored = 0 entry_point = 0x7ffc1c962fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1142 start_va = 0x7ffc1caa0000 end_va = 0x7ffc1cab5fff monitored = 0 entry_point = 0x7ffc1caa55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1143 start_va = 0x7ffc1e760000 end_va = 0x7ffc1e7defff monitored = 0 entry_point = 0x7ffc1e777110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1144 start_va = 0x7ffc27410000 end_va = 0x7ffc27420fff monitored = 0 entry_point = 0x7ffc27413320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1145 start_va = 0x7ffc28470000 end_va = 0x7ffc284d3fff monitored = 0 entry_point = 0x7ffc28485ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1146 start_va = 0x7ffc2b190000 end_va = 0x7ffc2b1c0fff monitored = 0 entry_point = 0x7ffc2b197d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1147 start_va = 0x7ffc2bb30000 end_va = 0x7ffc2bb58fff monitored = 0 entry_point = 0x7ffc2bb44530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1148 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1149 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1150 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1151 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1152 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1153 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1154 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1155 start_va = 0x7ffc2d5b0000 end_va = 0x7ffc2d656fff monitored = 0 entry_point = 0x7ffc2d5c58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1156 start_va = 0x7ffc2d6d0000 end_va = 0x7ffc2d73afff monitored = 0 entry_point = 0x7ffc2d6e90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1157 start_va = 0x7ffc2d9f0000 end_va = 0x7ffc2da96fff monitored = 0 entry_point = 0x7ffc2d9fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1158 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1159 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1160 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1161 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1162 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 103 os_tid = 0x388 Thread: id = 104 os_tid = 0x348 Thread: id = 105 os_tid = 0xdfc Thread: id = 106 os_tid = 0xba8 Thread: id = 107 os_tid = 0xafc Thread: id = 108 os_tid = 0xd5c Thread: id = 109 os_tid = 0xd60 Thread: id = 110 os_tid = 0xd84 Process: id = "7" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x3bdc3000" os_pid = "0xd10" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x268" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00038864" [0xc000000f] Region: id = 1243 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1244 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1245 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1246 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1247 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1248 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1249 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1250 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1251 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1252 start_va = 0x1d0000 end_va = 0x1d6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1253 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1254 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1255 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1256 start_va = 0x400000 end_va = 0x404fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1257 start_va = 0x410000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 1258 start_va = 0x540000 end_va = 0x542fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cimwin32.dll.mui" filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui") Region: id = 1259 start_va = 0x590000 end_va = 0x8c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1260 start_va = 0x8d0000 end_va = 0xa57fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 1261 start_va = 0xa60000 end_va = 0xbe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a60000" filename = "" Region: id = 1262 start_va = 0xbf0000 end_va = 0xcaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bf0000" filename = "" Region: id = 1263 start_va = 0xcb0000 end_va = 0xcb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 1264 start_va = 0xd40000 end_va = 0xe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 1265 start_va = 0xe40000 end_va = 0xe40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e40000" filename = "" Region: id = 1266 start_va = 0xe50000 end_va = 0xe50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e50000" filename = "" Region: id = 1267 start_va = 0xee0000 end_va = 0xf5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 1268 start_va = 0xf60000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 1269 start_va = 0xfe0000 end_va = 0x105ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 1270 start_va = 0x1060000 end_va = 0x115ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001060000" filename = "" Region: id = 1271 start_va = 0x1160000 end_va = 0x11dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 1272 start_va = 0x11e0000 end_va = 0x125ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011e0000" filename = "" Region: id = 1273 start_va = 0x1260000 end_va = 0x12dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001260000" filename = "" Region: id = 1274 start_va = 0x1360000 end_va = 0x13dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 1275 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1276 start_va = 0x180000000 end_va = 0x180002fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 1277 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1278 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1279 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1280 start_va = 0x7ff76eff0000 end_va = 0x7ff76f06ffff monitored = 0 entry_point = 0x7ff76f005f50 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 1281 start_va = 0x7ffc11870000 end_va = 0x7ffc11883fff monitored = 0 entry_point = 0x7ffc11871310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 1282 start_va = 0x7ffc17370000 end_va = 0x7ffc1753efff monitored = 0 entry_point = 0x7ffc17397df0 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 1283 start_va = 0x7ffc1bed0000 end_va = 0x7ffc1beddfff monitored = 0 entry_point = 0x7ffc1bed1da0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 1284 start_va = 0x7ffc1c1a0000 end_va = 0x7ffc1c1c4fff monitored = 0 entry_point = 0x7ffc1c1a9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1285 start_va = 0x7ffc1c1d0000 end_va = 0x7ffc1c1e3fff monitored = 0 entry_point = 0x7ffc1c1d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1286 start_va = 0x7ffc1c1f0000 end_va = 0x7ffc1c2e5fff monitored = 0 entry_point = 0x7ffc1c229590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1287 start_va = 0x7ffc1c4d0000 end_va = 0x7ffc1c4dafff monitored = 0 entry_point = 0x7ffc1c4d12b0 region_type = mapped_file name = "schedcli.dll" filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll") Region: id = 1288 start_va = 0x7ffc1c960000 end_va = 0x7ffc1c970fff monitored = 0 entry_point = 0x7ffc1c962fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1289 start_va = 0x7ffc1caa0000 end_va = 0x7ffc1cab5fff monitored = 0 entry_point = 0x7ffc1caa55e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1290 start_va = 0x7ffc1e500000 end_va = 0x7ffc1e50bfff monitored = 0 entry_point = 0x7ffc1e5035c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1291 start_va = 0x7ffc1e760000 end_va = 0x7ffc1e7defff monitored = 0 entry_point = 0x7ffc1e777110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1292 start_va = 0x7ffc20dd0000 end_va = 0x7ffc20de1fff monitored = 0 entry_point = 0x7ffc20dd3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 1293 start_va = 0x7ffc21330000 end_va = 0x7ffc21355fff monitored = 0 entry_point = 0x7ffc21331cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 1294 start_va = 0x7ffc249c0000 end_va = 0x7ffc24a0dfff monitored = 0 entry_point = 0x7ffc249d1ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 1295 start_va = 0x7ffc24ee0000 end_va = 0x7ffc24ef8fff monitored = 0 entry_point = 0x7ffc24ee4520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1296 start_va = 0x7ffc27270000 end_va = 0x7ffc27285fff monitored = 0 entry_point = 0x7ffc27271b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1297 start_va = 0x7ffc27e90000 end_va = 0x7ffc27ecdfff monitored = 0 entry_point = 0x7ffc27e9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 1298 start_va = 0x7ffc281d0000 end_va = 0x7ffc281d9fff monitored = 0 entry_point = 0x7ffc281d1660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 1299 start_va = 0x7ffc2a3e0000 end_va = 0x7ffc2a3f2fff monitored = 0 entry_point = 0x7ffc2a3e2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1300 start_va = 0x7ffc2a6e0000 end_va = 0x7ffc2a706fff monitored = 0 entry_point = 0x7ffc2a6e7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1301 start_va = 0x7ffc2b0b0000 end_va = 0x7ffc2b0bbfff monitored = 0 entry_point = 0x7ffc2b0b27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1302 start_va = 0x7ffc2b1f0000 end_va = 0x7ffc2b269fff monitored = 0 entry_point = 0x7ffc2b211a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 1303 start_va = 0x7ffc2b920000 end_va = 0x7ffc2b94cfff monitored = 0 entry_point = 0x7ffc2b939d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1304 start_va = 0x7ffc2bab0000 end_va = 0x7ffc2bb05fff monitored = 0 entry_point = 0x7ffc2bac0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1305 start_va = 0x7ffc2bb30000 end_va = 0x7ffc2bb58fff monitored = 0 entry_point = 0x7ffc2bb44530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1306 start_va = 0x7ffc2bcc0000 end_va = 0x7ffc2bd0afff monitored = 0 entry_point = 0x7ffc2bcc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1307 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1308 start_va = 0x7ffc2bd20000 end_va = 0x7ffc2bd2ffff monitored = 0 entry_point = 0x7ffc2bd256e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1309 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1310 start_va = 0x7ffc2be50000 end_va = 0x7ffc2c016fff monitored = 0 entry_point = 0x7ffc2beadb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1311 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1312 start_va = 0x7ffc2c360000 end_va = 0x7ffc2c376fff monitored = 0 entry_point = 0x7ffc2c361390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 1313 start_va = 0x7ffc2c380000 end_va = 0x7ffc2c3c2fff monitored = 0 entry_point = 0x7ffc2c394b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1314 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1315 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1316 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1317 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1318 start_va = 0x7ffc2d5b0000 end_va = 0x7ffc2d656fff monitored = 0 entry_point = 0x7ffc2d5c58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1319 start_va = 0x7ffc2d6d0000 end_va = 0x7ffc2d73afff monitored = 0 entry_point = 0x7ffc2d6e90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1320 start_va = 0x7ffc2d9f0000 end_va = 0x7ffc2da96fff monitored = 0 entry_point = 0x7ffc2d9fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1321 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1322 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1323 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1324 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1325 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1473 start_va = 0x7ffc24c20000 end_va = 0x7ffc24c4cfff monitored = 0 entry_point = 0x7ffc24c36680 region_type = mapped_file name = "vsswmi.dll" filename = "\\Windows\\System32\\wbem\\vsswmi.dll" (normalized: "c:\\windows\\system32\\wbem\\vsswmi.dll") Region: id = 1475 start_va = 0x13e0000 end_va = 0x145ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 1476 start_va = 0x7ffc1e550000 end_va = 0x7ffc1e6d1fff monitored = 0 entry_point = 0x7ffc1e5682a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1477 start_va = 0x7ffc1e530000 end_va = 0x7ffc1e547fff monitored = 0 entry_point = 0x7ffc1e532000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1488 start_va = 0x510000 end_va = 0x512fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 1489 start_va = 0x520000 end_va = 0x527fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 1490 start_va = 0x1460000 end_va = 0x153ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1491 start_va = 0x530000 end_va = 0x530fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll" filename = "\\Windows\\System32\\netmsg.dll" (normalized: "c:\\windows\\system32\\netmsg.dll") Region: id = 1492 start_va = 0x550000 end_va = 0x581fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll.mui" filename = "\\Windows\\System32\\en-US\\netmsg.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\netmsg.dll.mui") Region: id = 1502 start_va = 0xcc0000 end_va = 0xcc5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 1514 start_va = 0xcd0000 end_va = 0xcdffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 1842 start_va = 0x1540000 end_va = 0x15bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 1998 start_va = 0x510000 end_va = 0x512fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 1999 start_va = 0x520000 end_va = 0x527fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2004 start_va = 0xcc0000 end_va = 0xcc5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2035 start_va = 0x510000 end_va = 0x511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 2036 start_va = 0x520000 end_va = 0x52afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2037 start_va = 0x15c0000 end_va = 0x163ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 2038 start_va = 0x1640000 end_va = 0x173ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001640000" filename = "" Region: id = 2039 start_va = 0x1740000 end_va = 0x17bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 2040 start_va = 0x17c0000 end_va = 0x183ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000017c0000" filename = "" Region: id = 2041 start_va = 0x7ffc21330000 end_va = 0x7ffc21355fff monitored = 0 entry_point = 0x7ffc21331cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 2042 start_va = 0x7ffc239f0000 end_va = 0x7ffc23a0afff monitored = 0 entry_point = 0x7ffc239f1040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 2043 start_va = 0x7ffc24bb0000 end_va = 0x7ffc24be7fff monitored = 0 entry_point = 0x7ffc24bb12b0 region_type = mapped_file name = "smbwmiv2.dll" filename = "\\Windows\\System32\\smbwmiv2.dll" (normalized: "c:\\windows\\system32\\smbwmiv2.dll") Region: id = 2044 start_va = 0x7ffc24ee0000 end_va = 0x7ffc24ef8fff monitored = 0 entry_point = 0x7ffc24ee4520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2045 start_va = 0x7ffc25490000 end_va = 0x7ffc254c7fff monitored = 0 entry_point = 0x7ffc254a8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2046 start_va = 0x7ffc2b0b0000 end_va = 0x7ffc2b0bbfff monitored = 0 entry_point = 0x7ffc2b0b27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2047 start_va = 0x7ffc23fb0000 end_va = 0x7ffc23fe8fff monitored = 0 entry_point = 0x7ffc23fce280 region_type = mapped_file name = "wmitomi.dll" filename = "\\Windows\\System32\\wmitomi.dll" (normalized: "c:\\windows\\system32\\wmitomi.dll") Region: id = 2048 start_va = 0x7ffc1e4b0000 end_va = 0x7ffc1e4cffff monitored = 0 entry_point = 0x7ffc1e4b1f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 2049 start_va = 0x7ffc1e450000 end_va = 0x7ffc1e4adfff monitored = 0 entry_point = 0x7ffc1e455080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 2053 start_va = 0xcd0000 end_va = 0xcd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 2054 start_va = 0x1840000 end_va = 0x1a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001840000" filename = "" Region: id = 2060 start_va = 0xce0000 end_va = 0xce7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 2061 start_va = 0xcf0000 end_va = 0xcf1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 2062 start_va = 0x7ffc1c960000 end_va = 0x7ffc1c970fff monitored = 0 entry_point = 0x7ffc1c962fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2068 start_va = 0x1a40000 end_va = 0x1abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a40000" filename = "" Region: id = 2069 start_va = 0x7ffc24f70000 end_va = 0x7ffc24fabfff monitored = 0 entry_point = 0x7ffc24f92b50 region_type = mapped_file name = "tscfgwmi.dll" filename = "\\Windows\\System32\\tscfgwmi.dll" (normalized: "c:\\windows\\system32\\tscfgwmi.dll") Region: id = 2070 start_va = 0x7ffc2d740000 end_va = 0x7ffc2d882fff monitored = 0 entry_point = 0x7ffc2d768210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2071 start_va = 0x7ffc2daa0000 end_va = 0x7ffc2effefff monitored = 0 entry_point = 0x7ffc2dc011f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2072 start_va = 0x7ffc2c430000 end_va = 0x7ffc2ca73fff monitored = 0 entry_point = 0x7ffc2c5f64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 2073 start_va = 0x7ffc2d0a0000 end_va = 0x7ffc2d0f1fff monitored = 0 entry_point = 0x7ffc2d0af530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2074 start_va = 0x7ffc2c2a0000 end_va = 0x7ffc2c354fff monitored = 0 entry_point = 0x7ffc2c2e22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2075 start_va = 0x7ffc2bca0000 end_va = 0x7ffc2bcb3fff monitored = 0 entry_point = 0x7ffc2bca52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2076 start_va = 0x7ffc24f50000 end_va = 0x7ffc24f6efff monitored = 0 entry_point = 0x7ffc24f53c10 region_type = mapped_file name = "regapi.dll" filename = "\\Windows\\System32\\regapi.dll" (normalized: "c:\\windows\\system32\\regapi.dll") Region: id = 2077 start_va = 0x7ffc2b810000 end_va = 0x7ffc2b836fff monitored = 0 entry_point = 0x7ffc2b820aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 2078 start_va = 0x7ffc281d0000 end_va = 0x7ffc281d9fff monitored = 0 entry_point = 0x7ffc281d1660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2079 start_va = 0x7ffc248d0000 end_va = 0x7ffc248dcfff monitored = 0 entry_point = 0x7ffc248d1af0 region_type = mapped_file name = "dsparse.dll" filename = "\\Windows\\System32\\dsparse.dll" (normalized: "c:\\windows\\system32\\dsparse.dll") Region: id = 2081 start_va = 0x1ac0000 end_va = 0x1b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ac0000" filename = "" Region: id = 2082 start_va = 0x7ffc2b7d0000 end_va = 0x7ffc2b809fff monitored = 0 entry_point = 0x7ffc2b7d8d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 2084 start_va = 0x1b40000 end_va = 0x1bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b40000" filename = "" Region: id = 2085 start_va = 0x7ffc248b0000 end_va = 0x7ffc248c7fff monitored = 0 entry_point = 0x7ffc248be170 region_type = mapped_file name = "cfgbkend.dll" filename = "\\Windows\\System32\\cfgbkend.dll" (normalized: "c:\\windows\\system32\\cfgbkend.dll") Region: id = 2089 start_va = 0x7ffc23f90000 end_va = 0x7ffc23fa7fff monitored = 0 entry_point = 0x7ffc23f91630 region_type = mapped_file name = "utildll.dll" filename = "\\Windows\\System32\\utildll.dll" (normalized: "c:\\windows\\system32\\utildll.dll") Region: id = 2093 start_va = 0x7ffc23f70000 end_va = 0x7ffc23f83fff monitored = 0 entry_point = 0x7ffc23f71310 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 2094 start_va = 0x7ffc27e90000 end_va = 0x7ffc27ecdfff monitored = 0 entry_point = 0x7ffc27e9a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 2095 start_va = 0x7ffc2caa0000 end_va = 0x7ffc2cec8fff monitored = 0 entry_point = 0x7ffc2cac8740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2096 start_va = 0x1bc0000 end_va = 0x1c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001bc0000" filename = "" Region: id = 2097 start_va = 0x7ffc24620000 end_va = 0x7ffc24626fff monitored = 0 entry_point = 0x7ffc24621600 region_type = mapped_file name = "rdpcfgex.dll" filename = "\\Windows\\System32\\rdpcfgex.dll" (normalized: "c:\\windows\\system32\\rdpcfgex.dll") Region: id = 2100 start_va = 0xd00000 end_va = 0xd06fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 2101 start_va = 0x1c40000 end_va = 0x1cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 2102 start_va = 0x7ffc2d1c0000 end_va = 0x7ffc2d1c7fff monitored = 0 entry_point = 0x7ffc2d1c1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2103 start_va = 0x7ffc25430000 end_va = 0x7ffc25445fff monitored = 0 entry_point = 0x7ffc254319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2104 start_va = 0xd00000 end_va = 0xd01fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wmitomi.dll.mui" filename = "\\Windows\\System32\\en-US\\wmitomi.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wmitomi.dll.mui") Region: id = 2105 start_va = 0x7ffc25410000 end_va = 0x7ffc25429fff monitored = 0 entry_point = 0x7ffc25412430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2106 start_va = 0x7ffc2b570000 end_va = 0x7ffc2b5cbfff monitored = 0 entry_point = 0x7ffc2b586f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2108 start_va = 0xd10000 end_va = 0xd18fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d10000" filename = "" Region: id = 2110 start_va = 0x7ffc2a710000 end_va = 0x7ffc2a7b9fff monitored = 0 entry_point = 0x7ffc2a737910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2111 start_va = 0x7ffc239a0000 end_va = 0x7ffc239a9fff monitored = 0 entry_point = 0x7ffc239a14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2112 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2113 start_va = 0xd10000 end_va = 0xd15fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d10000" filename = "" Region: id = 2129 start_va = 0x510000 end_va = 0x511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 2157 start_va = 0x520000 end_va = 0x529fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2439 start_va = 0x520000 end_va = 0x528fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 2440 start_va = 0xcf0000 end_va = 0xcfafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 2441 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2443 start_va = 0xcf0000 end_va = 0xcf9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 2457 start_va = 0xcf0000 end_va = 0xcfafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 2458 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2466 start_va = 0x510000 end_va = 0x511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 2467 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2468 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2479 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2480 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2486 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2487 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2498 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2499 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2503 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2504 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2507 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2508 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2515 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2516 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2521 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2522 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2527 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2528 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2533 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2534 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2536 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2537 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2541 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2542 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2544 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2545 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2550 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2551 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2553 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2554 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2556 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2557 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2561 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2562 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2566 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2567 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2571 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2572 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2575 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2576 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2579 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2580 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2585 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2586 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2588 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2589 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2594 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2595 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2597 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2598 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2602 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2603 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2607 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2608 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2616 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2617 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2620 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2621 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2625 start_va = 0xcc0000 end_va = 0xccafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 2626 start_va = 0x7ffc24630000 end_va = 0x7ffc24696fff monitored = 0 entry_point = 0x7ffc246363e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Thread: id = 111 os_tid = 0x132c Thread: id = 112 os_tid = 0xf4c Thread: id = 113 os_tid = 0xf44 Thread: id = 114 os_tid = 0xee4 Thread: id = 115 os_tid = 0xd2c Thread: id = 116 os_tid = 0xd28 Thread: id = 117 os_tid = 0xd24 Thread: id = 118 os_tid = 0xd14 Thread: id = 143 os_tid = 0x1358 Thread: id = 146 os_tid = 0x1094 Thread: id = 179 os_tid = 0xf70 Thread: id = 180 os_tid = 0xc48 Thread: id = 181 os_tid = 0x1028 Thread: id = 183 os_tid = 0xe8c Thread: id = 185 os_tid = 0x8ec Thread: id = 187 os_tid = 0x668 Thread: id = 188 os_tid = 0x1370 Thread: id = 190 os_tid = 0x126c Process: id = "8" image_name = "unsecapp.exe" filename = "c:\\windows\\system32\\wbem\\unsecapp.exe" page_root = "0xa18c000" os_pid = "0xb5c" os_integrity_level = "0x3000" os_privileges = "0x60900000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x268" cmd_line = "C:\\Windows\\system32\\wbem\\unsecapp.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f741" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1183 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1184 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1185 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1186 start_va = 0x50000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1187 start_va = 0x150000 end_va = 0x153fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1188 start_va = 0x160000 end_va = 0x160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 1189 start_va = 0x170000 end_va = 0x171fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1190 start_va = 0x180000 end_va = 0x186fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1191 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1192 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1193 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1194 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1195 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1196 start_va = 0x400000 end_va = 0x4bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1197 start_va = 0x510000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 1198 start_va = 0x610000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 1199 start_va = 0x710000 end_va = 0x897fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 1200 start_va = 0x8a0000 end_va = 0xa20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 1201 start_va = 0xa30000 end_va = 0x1e2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a30000" filename = "" Region: id = 1202 start_va = 0x1e30000 end_va = 0x1f2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 1203 start_va = 0x1fd0000 end_va = 0x1fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 1204 start_va = 0x1fe0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001fe0000" filename = "" Region: id = 1205 start_va = 0x20e0000 end_va = 0x21dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 1206 start_va = 0x21e0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 1207 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1208 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1209 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1210 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1211 start_va = 0x7ff680fa0000 end_va = 0x7ff680fb1fff monitored = 0 entry_point = 0x7ff680fa63b0 region_type = mapped_file name = "unsecapp.exe" filename = "\\Windows\\System32\\wbem\\unsecapp.exe" (normalized: "c:\\windows\\system32\\wbem\\unsecapp.exe") Region: id = 1212 start_va = 0x7ffc1c1d0000 end_va = 0x7ffc1c1e3fff monitored = 0 entry_point = 0x7ffc1c1d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1213 start_va = 0x7ffc1e760000 end_va = 0x7ffc1e7defff monitored = 0 entry_point = 0x7ffc1e777110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1214 start_va = 0x7ffc2a620000 end_va = 0x7ffc2a6b5fff monitored = 0 entry_point = 0x7ffc2a645570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 1215 start_va = 0x7ffc2bb30000 end_va = 0x7ffc2bb58fff monitored = 0 entry_point = 0x7ffc2bb44530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1216 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1217 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1218 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1219 start_va = 0x7ffc2ced0000 end_va = 0x7ffc2cf0afff monitored = 0 entry_point = 0x7ffc2ced12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1220 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1221 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1222 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1223 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1224 start_va = 0x7ffc2d6d0000 end_va = 0x7ffc2d73afff monitored = 0 entry_point = 0x7ffc2d6e90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1225 start_va = 0x7ffc2d740000 end_va = 0x7ffc2d882fff monitored = 0 entry_point = 0x7ffc2d768210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1226 start_va = 0x7ffc2d9f0000 end_va = 0x7ffc2da96fff monitored = 0 entry_point = 0x7ffc2d9fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1227 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1228 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1229 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1230 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1231 start_va = 0x7ffc1c1f0000 end_va = 0x7ffc1c2e5fff monitored = 0 entry_point = 0x7ffc1c229590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1232 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 2064 start_va = 0x1d0000 end_va = 0x1d2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2451 start_va = 0x1e0000 end_va = 0x1e2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2452 start_va = 0x4c0000 end_va = 0x4d8fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 2491 start_va = 0x1d0000 end_va = 0x1d2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2492 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2493 start_va = 0x22e0000 end_va = 0x23dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Thread: id = 124 os_tid = 0x1048 Thread: id = 125 os_tid = 0x1044 Thread: id = 126 os_tid = 0x1030 Thread: id = 127 os_tid = 0x102c Thread: id = 128 os_tid = 0x104c Thread: id = 129 os_tid = 0x1050 Thread: id = 198 os_tid = 0x13e4 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4e6ea000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x208" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\vmictimesync" [0xa], "NT SERVICE\\Wcmsvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000c3e6" [0xc000000f], "LOCAL" [0x7] Region: id = 1849 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1850 start_va = 0x20000 end_va = 0x20fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 1851 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1852 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1853 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1854 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1855 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1856 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1857 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1858 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1859 start_va = 0x1e0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1860 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1861 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1862 start_va = 0x480000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 1863 start_va = 0x4a0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1864 start_va = 0x4c0000 end_va = 0x4c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 1865 start_va = 0x4d0000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 1866 start_va = 0x590000 end_va = 0x590fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 1867 start_va = 0x5a0000 end_va = 0x5a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 1868 start_va = 0x5b0000 end_va = 0x5b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 1869 start_va = 0x5c0000 end_va = 0x5c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1870 start_va = 0x5d0000 end_va = 0x5d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1871 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 1872 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1873 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1874 start_va = 0x700000 end_va = 0x7fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 1875 start_va = 0x800000 end_va = 0x987fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 1876 start_va = 0x990000 end_va = 0xb10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 1877 start_va = 0xb20000 end_va = 0xb20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b20000" filename = "" Region: id = 1878 start_va = 0xb70000 end_va = 0xb76fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b70000" filename = "" Region: id = 1879 start_va = 0xb80000 end_va = 0xbe3fff monitored = 0 entry_point = 0xb95ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1880 start_va = 0xc00000 end_va = 0xcfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 1881 start_va = 0xe00000 end_va = 0xe7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 1882 start_va = 0xe80000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 1883 start_va = 0xf00000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 1884 start_va = 0xf80000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 1885 start_va = 0x1000000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 1886 start_va = 0x1160000 end_va = 0x1166fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001160000" filename = "" Region: id = 1887 start_va = 0x1200000 end_va = 0x12fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1888 start_va = 0x1300000 end_va = 0x137ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1889 start_va = 0x1380000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001380000" filename = "" Region: id = 1890 start_va = 0x1400000 end_va = 0x147ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1891 start_va = 0x1500000 end_va = 0x15fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 1892 start_va = 0x1600000 end_va = 0x167ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 1893 start_va = 0x1690000 end_va = 0x178ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 1894 start_va = 0x1800000 end_va = 0x18fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 1895 start_va = 0x1900000 end_va = 0x19fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001900000" filename = "" Region: id = 1896 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 1897 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1898 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1899 start_va = 0x1d00000 end_va = 0x2036fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1900 start_va = 0x2040000 end_va = 0x213ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002040000" filename = "" Region: id = 1901 start_va = 0x2140000 end_va = 0x221ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1902 start_va = 0x2220000 end_va = 0x231ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002220000" filename = "" Region: id = 1903 start_va = 0x2320000 end_va = 0x241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 1904 start_va = 0x2420000 end_va = 0x251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 1905 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1906 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1907 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 1908 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 1909 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1910 start_va = 0x2c00000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 1911 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 1912 start_va = 0x2e00000 end_va = 0x2efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 1913 start_va = 0x2f00000 end_va = 0x2ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f00000" filename = "" Region: id = 1914 start_va = 0x3000000 end_va = 0x30fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003000000" filename = "" Region: id = 1915 start_va = 0x3100000 end_va = 0x31fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003100000" filename = "" Region: id = 1916 start_va = 0x3200000 end_va = 0x32fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003200000" filename = "" Region: id = 1917 start_va = 0x3300000 end_va = 0x33fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 1918 start_va = 0x3500000 end_va = 0x35fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003500000" filename = "" Region: id = 1919 start_va = 0x3600000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003600000" filename = "" Region: id = 1920 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1921 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 1922 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 1923 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 1924 start_va = 0x7ff6ab660000 end_va = 0x7ff6ab66cfff monitored = 0 entry_point = 0x7ff6ab663980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1925 start_va = 0x7ffc14b00000 end_va = 0x7ffc14b32fff monitored = 0 entry_point = 0x7ffc14b0ae20 region_type = mapped_file name = "wscsvc.dll" filename = "\\Windows\\System32\\wscsvc.dll" (normalized: "c:\\windows\\system32\\wscsvc.dll") Region: id = 1926 start_va = 0x7ffc15bb0000 end_va = 0x7ffc15d67fff monitored = 0 entry_point = 0x7ffc15bb5550 region_type = mapped_file name = "wmalfxgfxdsp.dll" filename = "\\Windows\\System32\\WMALFXGFXDSP.dll" (normalized: "c:\\windows\\system32\\wmalfxgfxdsp.dll") Region: id = 1927 start_va = 0x7ffc16810000 end_va = 0x7ffc16897fff monitored = 0 entry_point = 0x7ffc16824510 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 1928 start_va = 0x7ffc1c1d0000 end_va = 0x7ffc1c1e3fff monitored = 0 entry_point = 0x7ffc1c1d1800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1929 start_va = 0x7ffc1c1f0000 end_va = 0x7ffc1c2e5fff monitored = 0 entry_point = 0x7ffc1c229590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1930 start_va = 0x7ffc1c960000 end_va = 0x7ffc1c970fff monitored = 0 entry_point = 0x7ffc1c962fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1931 start_va = 0x7ffc1e760000 end_va = 0x7ffc1e7defff monitored = 0 entry_point = 0x7ffc1e777110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1932 start_va = 0x7ffc23d20000 end_va = 0x7ffc23d4afff monitored = 0 entry_point = 0x7ffc23d2c3c0 region_type = mapped_file name = "rtworkq.dll" filename = "\\Windows\\System32\\RTWorkQ.dll" (normalized: "c:\\windows\\system32\\rtworkq.dll") Region: id = 1933 start_va = 0x7ffc23d50000 end_va = 0x7ffc23e5cfff monitored = 0 entry_point = 0x7ffc23d7f420 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" (normalized: "c:\\windows\\system32\\mfplat.dll") Region: id = 1934 start_va = 0x7ffc247b0000 end_va = 0x7ffc247bafff monitored = 0 entry_point = 0x7ffc247b1d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1935 start_va = 0x7ffc247c0000 end_va = 0x7ffc24807fff monitored = 0 entry_point = 0x7ffc247ca1e0 region_type = mapped_file name = "dhcpcore6.dll" filename = "\\Windows\\System32\\dhcpcore6.dll" (normalized: "c:\\windows\\system32\\dhcpcore6.dll") Region: id = 1936 start_va = 0x7ffc253a0000 end_va = 0x7ffc253fcfff monitored = 0 entry_point = 0x7ffc253b2bf0 region_type = mapped_file name = "dhcpcore.dll" filename = "\\Windows\\System32\\dhcpcore.dll" (normalized: "c:\\windows\\system32\\dhcpcore.dll") Region: id = 1937 start_va = 0x7ffc25400000 end_va = 0x7ffc2540dfff monitored = 0 entry_point = 0x7ffc25402e50 region_type = mapped_file name = "cmintegrator.dll" filename = "\\Windows\\System32\\cmintegrator.dll" (normalized: "c:\\windows\\system32\\cmintegrator.dll") Region: id = 1938 start_va = 0x7ffc25410000 end_va = 0x7ffc25429fff monitored = 0 entry_point = 0x7ffc25412430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1939 start_va = 0x7ffc25430000 end_va = 0x7ffc25445fff monitored = 0 entry_point = 0x7ffc254319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1940 start_va = 0x7ffc25450000 end_va = 0x7ffc25487fff monitored = 0 entry_point = 0x7ffc254568f0 region_type = mapped_file name = "wcmcsp.dll" filename = "\\Windows\\System32\\wcmcsp.dll" (normalized: "c:\\windows\\system32\\wcmcsp.dll") Region: id = 1941 start_va = 0x7ffc25490000 end_va = 0x7ffc254c7fff monitored = 0 entry_point = 0x7ffc254a8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1942 start_va = 0x7ffc254d0000 end_va = 0x7ffc25568fff monitored = 0 entry_point = 0x7ffc254ea090 region_type = mapped_file name = "wcmsvc.dll" filename = "\\Windows\\System32\\wcmsvc.dll" (normalized: "c:\\windows\\system32\\wcmsvc.dll") Region: id = 1943 start_va = 0x7ffc27000000 end_va = 0x7ffc27135fff monitored = 0 entry_point = 0x7ffc2702f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 1944 start_va = 0x7ffc27290000 end_va = 0x7ffc2739afff monitored = 0 entry_point = 0x7ffc272d2610 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 1945 start_va = 0x7ffc27410000 end_va = 0x7ffc27420fff monitored = 0 entry_point = 0x7ffc27413320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1946 start_va = 0x7ffc27950000 end_va = 0x7ffc279bffff monitored = 0 entry_point = 0x7ffc27972960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 1947 start_va = 0x7ffc27bc0000 end_va = 0x7ffc27c87fff monitored = 0 entry_point = 0x7ffc27c013f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1948 start_va = 0x7ffc27fa0000 end_va = 0x7ffc27fe9fff monitored = 0 entry_point = 0x7ffc27faac30 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 1949 start_va = 0x7ffc281e0000 end_va = 0x7ffc281f7fff monitored = 0 entry_point = 0x7ffc281e5910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1950 start_va = 0x7ffc284e0000 end_va = 0x7ffc28690fff monitored = 0 entry_point = 0x7ffc28533690 region_type = mapped_file name = "wevtsvc.dll" filename = "\\Windows\\System32\\wevtsvc.dll" (normalized: "c:\\windows\\system32\\wevtsvc.dll") Region: id = 1951 start_va = 0x7ffc28f90000 end_va = 0x7ffc28f98fff monitored = 0 entry_point = 0x7ffc28f919a0 region_type = mapped_file name = "nrpsrv.dll" filename = "\\Windows\\System32\\nrpsrv.dll" (normalized: "c:\\windows\\system32\\nrpsrv.dll") Region: id = 1952 start_va = 0x7ffc28fa0000 end_va = 0x7ffc28faafff monitored = 0 entry_point = 0x7ffc28fa1cd0 region_type = mapped_file name = "lmhsvc.dll" filename = "\\Windows\\System32\\lmhsvc.dll" (normalized: "c:\\windows\\system32\\lmhsvc.dll") Region: id = 1953 start_va = 0x7ffc2a1f0000 end_va = 0x7ffc2a375fff monitored = 0 entry_point = 0x7ffc2a23d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1954 start_va = 0x7ffc2a3e0000 end_va = 0x7ffc2a3f2fff monitored = 0 entry_point = 0x7ffc2a3e2760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1955 start_va = 0x7ffc2a6e0000 end_va = 0x7ffc2a706fff monitored = 0 entry_point = 0x7ffc2a6e7940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 1956 start_va = 0x7ffc2a710000 end_va = 0x7ffc2a7b9fff monitored = 0 entry_point = 0x7ffc2a737910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1957 start_va = 0x7ffc2ab20000 end_va = 0x7ffc2ab51fff monitored = 0 entry_point = 0x7ffc2ab32340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 1958 start_va = 0x7ffc2aca0000 end_va = 0x7ffc2acc3fff monitored = 0 entry_point = 0x7ffc2aca3260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1959 start_va = 0x7ffc2ae40000 end_va = 0x7ffc2af33fff monitored = 0 entry_point = 0x7ffc2ae4a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 1960 start_va = 0x7ffc2b0b0000 end_va = 0x7ffc2b0bbfff monitored = 0 entry_point = 0x7ffc2b0b27e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1961 start_va = 0x7ffc2b190000 end_va = 0x7ffc2b1c0fff monitored = 0 entry_point = 0x7ffc2b197d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1962 start_va = 0x7ffc2b400000 end_va = 0x7ffc2b41efff monitored = 0 entry_point = 0x7ffc2b405d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1963 start_va = 0x7ffc2b570000 end_va = 0x7ffc2b5cbfff monitored = 0 entry_point = 0x7ffc2b586f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1964 start_va = 0x7ffc2b740000 end_va = 0x7ffc2b74afff monitored = 0 entry_point = 0x7ffc2b7419a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1965 start_va = 0x7ffc2b920000 end_va = 0x7ffc2b94cfff monitored = 0 entry_point = 0x7ffc2b939d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1966 start_va = 0x7ffc2bab0000 end_va = 0x7ffc2bb05fff monitored = 0 entry_point = 0x7ffc2bac0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1967 start_va = 0x7ffc2bb30000 end_va = 0x7ffc2bb58fff monitored = 0 entry_point = 0x7ffc2bb44530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1968 start_va = 0x7ffc2bca0000 end_va = 0x7ffc2bcb3fff monitored = 0 entry_point = 0x7ffc2bca52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1969 start_va = 0x7ffc2bcc0000 end_va = 0x7ffc2bd0afff monitored = 0 entry_point = 0x7ffc2bcc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 1970 start_va = 0x7ffc2bd10000 end_va = 0x7ffc2bd1efff monitored = 0 entry_point = 0x7ffc2bd13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1971 start_va = 0x7ffc2bd20000 end_va = 0x7ffc2bd2ffff monitored = 0 entry_point = 0x7ffc2bd256e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1972 start_va = 0x7ffc2bd30000 end_va = 0x7ffc2bd99fff monitored = 0 entry_point = 0x7ffc2bd66d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1973 start_va = 0x7ffc2be50000 end_va = 0x7ffc2c016fff monitored = 0 entry_point = 0x7ffc2beadb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1974 start_va = 0x7ffc2c020000 end_va = 0x7ffc2c0a5fff monitored = 0 entry_point = 0x7ffc2c02d8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1975 start_va = 0x7ffc2c0b0000 end_va = 0x7ffc2c297fff monitored = 0 entry_point = 0x7ffc2c0dba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1976 start_va = 0x7ffc2c380000 end_va = 0x7ffc2c3c2fff monitored = 0 entry_point = 0x7ffc2c394b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1977 start_va = 0x7ffc2cf10000 end_va = 0x7ffc2d095fff monitored = 0 entry_point = 0x7ffc2cf5ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1978 start_va = 0x7ffc2d110000 end_va = 0x7ffc2d1bcfff monitored = 0 entry_point = 0x7ffc2d1281a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1979 start_va = 0x7ffc2d1c0000 end_va = 0x7ffc2d1c7fff monitored = 0 entry_point = 0x7ffc2d1c1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1980 start_va = 0x7ffc2d1d0000 end_va = 0x7ffc2d44cfff monitored = 0 entry_point = 0x7ffc2d2a4970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1981 start_va = 0x7ffc2d450000 end_va = 0x7ffc2d5a5fff monitored = 0 entry_point = 0x7ffc2d45a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1982 start_va = 0x7ffc2d5b0000 end_va = 0x7ffc2d656fff monitored = 0 entry_point = 0x7ffc2d5c58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1983 start_va = 0x7ffc2d6d0000 end_va = 0x7ffc2d73afff monitored = 0 entry_point = 0x7ffc2d6e90c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1984 start_va = 0x7ffc2d740000 end_va = 0x7ffc2d882fff monitored = 0 entry_point = 0x7ffc2d768210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1985 start_va = 0x7ffc2d9f0000 end_va = 0x7ffc2da96fff monitored = 0 entry_point = 0x7ffc2d9fb4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1986 start_va = 0x7ffc2f210000 end_va = 0x7ffc2f2acfff monitored = 0 entry_point = 0x7ffc2f2178a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1987 start_va = 0x7ffc2f2b0000 end_va = 0x7ffc2f3cbfff monitored = 0 entry_point = 0x7ffc2f2f02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1988 start_va = 0x7ffc2f440000 end_va = 0x7ffc2f500fff monitored = 0 entry_point = 0x7ffc2f460da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1989 start_va = 0x7ffc2f510000 end_va = 0x7ffc2f56afff monitored = 0 entry_point = 0x7ffc2f5238b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1990 start_va = 0x7ffc2f680000 end_va = 0x7ffc2f840fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1991 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 2549 start_va = 0x3800000 end_va = 0x3e2ffff monitored = 0 entry_point = 0x38193f0 region_type = mapped_file name = "sppsvc.exe" filename = "\\Windows\\System32\\sppsvc.exe" (normalized: "c:\\windows\\system32\\sppsvc.exe") Thread: id = 147 os_tid = 0x1138 Thread: id = 148 os_tid = 0x113c Thread: id = 149 os_tid = 0x1020 Thread: id = 150 os_tid = 0x1014 Thread: id = 151 os_tid = 0xd70 Thread: id = 152 os_tid = 0x32c Thread: id = 153 os_tid = 0xc8c Thread: id = 154 os_tid = 0xfcc Thread: id = 155 os_tid = 0xfc0 Thread: id = 156 os_tid = 0xf68 Thread: id = 157 os_tid = 0xe94 Thread: id = 158 os_tid = 0x468 Thread: id = 159 os_tid = 0x448 Thread: id = 160 os_tid = 0x434 Thread: id = 161 os_tid = 0x430 Thread: id = 162 os_tid = 0x278 Thread: id = 163 os_tid = 0x284 Thread: id = 164 os_tid = 0x168 Thread: id = 165 os_tid = 0xf0 Thread: id = 166 os_tid = 0x60 Thread: id = 167 os_tid = 0x3fc Thread: id = 168 os_tid = 0x3e0 Thread: id = 169 os_tid = 0x370 Thread: id = 170 os_tid = 0x1084 Thread: id = 171 os_tid = 0x136c